Re: More magic quotes questions



On Mon, 1 May 2006 11:43:39 -0500, "Jon" <jonra@xxxxxxxxxx> wrote:

Any ideas on the best way to handle this?

Don't use .htaccess to turn off magic quotes. If your code is setup
to escape the strings depending on whether or not it's enabled then it
shouldn't matter if magic quotes is enabled. I've never had the
get_magic_quotes_gpc() function return an incorrect value but then I
don't ever use .htaccess to set that magic_quotes_gpc setting.

.



Relevant Pages

  • Re: More magic quotes questions
    ... I've been a PHP developer for about a year now, ... .htaccess to turn magic_quotes_gpc off and I escape as needed from there. ... When accessing GPC data I *always* run it through undoAddSlashes. ... Depending on whether magic quotes is active, ...
    (comp.lang.php)
  • RE: [PHP] magic quotes
    ... Subject: [PHP] magic quotes ... ..htaccess might not work for a number of reasons, ... Is there any way I can strip quotes from the form field with out ...
    (php.general)
  • More magic quotes questions
    ... I've been a PHP developer for about a year now, ... ..htaccess to turn magic_quotes_gpc off and I escape as needed from there. ... and escape where magic quotes are off. ... This basically traps me into not being able to check if they're on or off, ...
    (comp.lang.php)
  • RE: [PHP] magic quotes
    ... ..htaccess is only meaningful for Apache. ... JavaScript is equally useless to Ajax for working around Magic Quotes. ...
    (php.general)
  • Re: Magic Quotes question
    ... Why wouldnt you just put the escape function inside of the database ... many modern db engines can use *any* delimiter, for any language, ... "magic quotes" was simply the wrong level to apply data filtering at. ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)