Vaya cacao has armado... yo probaría con esto:
<?php
$colname_Recordset1 = "-1";
if (isset($_GET['canal'])) {
$colname_Recordset1 = (get_magic_quotes_gpc()) ? $_GET['canal'] : addslashes($_GET['canal']);
}
str_replace("+", "\+", $_GET['canal']);
mysql_select_db($database_conexion1, $conexion1);
$query_Recordset1 = sprintf("SELECT * FROM canales WHERE canal = '%s' ORDER BY pos DESC", $colname_Recordset1);
$Recordset1 = mysql_query($query_Recordset1, $conexion1) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
?>
Aunque sigo diciendo que es una cutrez lo que propongo
