title: Prepare PDO insert wrongly backslash
body: <p>I have troubles when I use "PDO prepare" : </p>
  
  <pre><code>$sql ="INSERT INTO table (id, reponse_id_num_quest  , reponse__rep, reponse__commentaire) VALUES (:id, :id_quest, :val, :comm)";
  $res=$db-&gt;prepare($sql);
  $res-&gt;bindParam(':id',$idUniq);
  $res-&gt;bindParam(':id_quest',$ids[$index]);
  $res-&gt;bindParam(':val',$val);
  $res-&gt;bindParam(':comm',$commentaire, PDO::PARAM_STR);
  $res-&gt;execute();
  </code></pre>
  
  <p>When the variable "$commentaire" contains a string with quote " ' " or backslash, the query insert backslash before the special character.</p>
  
  <blockquote>
    <p>Ex:</p>
    
    <p>Original string : I don't</p>
    
    <p>In base string : I don\'t</p>
  </blockquote>
  
  <p>So, on the final HTML view, the string isn't the original.</p>
  
  <p>How could I insert correctly ? Thanks</p>