#40890 [Opn->Bgs]: long set_magic_quotes_gpc(int new_setting)
| From: | tony2001@php.net | Date: | Thu, 22 Mar 2007 10:30:28 +0000 |
| Subject: | #40890 [Opn->Bgs]: long set_magic_quotes_gpc(int new_setting) | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-110672@lists.php.net to get a copy of this message | ||
ID: 40890
Updated by: tony2001@php.net
Reported By: bothie at gmx dot de
-Status: Open
+Status: Bogus
Bug Type: Feature/Change Request
Operating System: any
PHP Version: 5.2.1
New Comment:
>A new introduced function set_magic_quotes_gpc would change that as
>any program can enforce that setting in that way which it self
>expects it for it's own runtime.
1) magic quotes are finally removed in PHP6.
2) changing this setting in runtime does not affect the data, because
quotes are applied _before_ the script execution started.
Previous Comments:
------------------------------------------------------------------------
[2007-03-22 10:00:17] bothie at gmx dot de
Description:
------------
Add functions like "long set_magic_quotes_gpc(int new_setting)"
Having security in mind, many web application (WA) programmers expect
magic_quotes_gpc to be set (or to be not set). It's possible to write
WAs which can tolerate both settings but the most easiest ist to have
just magic_quotes_gpc being set which is the default of course. But some
sites have magic_quotes_gpc not set. So mixing WAs expecting
magic_quotes_gpc to be set and WAs expecting magic_quotes_gpc not to be
set is impossible. A new introduced function set_magic_quotes_gpc would
change that as any program can enforce that setting in that way which it
self expects it for it's own runtime. (This feature request should be
seen a little bit more general, any other value which could be set in
php.ini should get it's set_ counterpart as well except for some
exceptions like disable_functions, for which a set- counterpart may not
be so wise - or at least a set_disable_function should only be able to
ADD additional functions to the set of disabled functions, not to REMOVE
any of them specified in php.ini).
(I've just seen the ini_set-function and am very disappointed about it
NOT supporting a change to magic_quotes_gpc!)
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=40890&edit=1