use sql escape string function to while inserting products..