Successful SQL Injection despite PHP Magic Quotes – 9to5Answer

The trick is usually to pass a binary value so that the backslash would become a part of valid multibyte character. Here is a blog post about it.