Java window.document.location= HELP

I have got some code, as follows;

var SQL=" WHERE "
if(document.forms.pubsearch.food.value=="1")
{
SQL=SQL+"Food = 'YES'"
}
window.document.location="pubs.php?offset=0&sql="+SQL;

But when I open the new window, and use the variable $sql (php) it puts / in front of the inverted commas around YES.

How do I stop this?

Cheers

Turn off magic_quotes_gpc in php.ini or use:

$sql=stripslashes($sql);