I have a string value that for example says

Code MySQL:
insert into t1 (textval) values ("Joe Smith of the NY Times says 'here is my quote and he said "this" to me and I can't say any more.");

If I escape all the interior quote with \' or \" when it renders in the browser it is showing little boxes or the Firefox FF something square box but does not render the quotation marks. What am I doing wrong?