I am getting data though a PHP text box and inserting it into a MySQL database with a normal insert command. The text box takes in a comment frm the user for a particular Ac
Use mysql_real_escape_string(), or better yet, use parameterised queries with PDO.
Use MySQLi prepared statements.
You can pass special characters easily without any extra work.
Read MySQLi prepared statements.
use the function mysql_real_escape_string()