I noticed that when users put a ' in either the title or description text it would come out as '' when looking at it on e.g. album_showpage.php.
When I replaced e.g. $row[pic_title] with stripslashes(str_replace("''", "'", $row['pic_title'])) it was fine.
I did that with all the pic_des and pic_title occurences in album_showpage.php and album_hierarchy_sql.php and it seems fine now.