How to safely accept quotation mark and output safely

Sure, that is what I meant, PDO deals with apostrophes for you.