try adding the following code at line 1 of your page;
<?php
@session_start();
if($_SERVER["REQUEST_METHOD"] == "POST") {
foreach($_POST as $k => $v) {
$_POST[$k] = htmlspecialchars($v, ENT_QUOTES);
}
}
?>
this will convert the quotes to HTML entities.