$deger = mysql_real_escape_string($_POST["deger"]);
veya

$deger = addslashes($_POST["deger"]);

veya php.ini de

magic_quotes_gpc = On