$MyStringName = mysqli_real_escape_string($dblink, $MyStringName);
	//Note $dblink is the database link from mysqli_connect()

Feel free to comment if you can add help to this page or point out issues and solutions you have found. I do not provide support on this site, if you need help with a problem head over to stack overflow.