How to handle single or double quote in SQL query

Use a mysql function in PHP
mysql_real_escape_string();
Example: $cat_name = mysql_real_escape_string($cat_name);