Now I think about it, they should be checking the data coming in anyway for apostrophes and other special characters to avoid nasty database hacking attacks like SQL injections.