there are a couple different magic quotes settings, magic quotes runtime an GPC Magic quotes, one of those is probably enabled.
to use stripslashes, add the following code at line 1 of the confirm page:
<?php
if($_SERVER["REQUEST_METHOD"] == "POST") {
foreach($_POST as $key => $val) {
if(is_array($_POST[$key])) $_POST[$key] = stripslashes($_POST[$key]);
}
}
?>