hmmm…
If you are ftping the code directly to the server that won’t happen.
Since you are talking about SQL and so on in the post, it is hard to understand how your code is doing but I suspect that you have some kind of html form and submit the html… or, you are entering it directly to the db. If this is the case, you will need to clean the html prior to inserting to the db… something like this:
or… you may try to mimic the same situation just before you insert the data in to the db.