note 9257 added to Microsoft SQL Server functions

Hi, I am developing a form on php3 which sends data back to a database. I encountered a problem which I hope someone can help me with. Let's say I have a textbox with the name 'text' in my form. When I insert that into the database, the SQL would be INSERT TextField values ('$text'). The problem I face is that the SQL won't work if there is a single quotation mark in the $text textbox. I assume it's because the SQL reads it as a terminator for the variable name. Can someone please let me know how I can get around this problem ? http://www.php.net/manual/ref.mssql.php