#22424 [Opn->Bgs]: magic_quotes_gpc doesn't escape URL-encoded single quotes
| From: | oregon at pobox dot com | Date: | Wed, 26 Feb 2003 01:35:44 +0000 |
| Subject: | #22424 [Opn->Bgs]: magic_quotes_gpc doesn't escape URL-encoded single quotes | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-34279@lists.php.net to get a copy of this message | ||
ID: 22424
User updated by: oregon at pobox dot com
Reported By: oregon at pobox dot com
-Status: Open
+Status: Bogus
Bug Type: Variables related
Operating System: Linux 2.4.9-31
PHP Version: 4.2.3
New Comment:
Nevermind, it actually does work apparently.
Previous Comments:
------------------------------------------------------------------------
[2003-02-25 19:26:33] oregon at pobox dot com
The magic_quotes_gpc option correctly escapes single quotes, but it
ignores the single quote in GET data when the single quote is
URL-encoded (as %27). This causes database errors on submitted data
what was supposed to be handled by magic_quotes_gpc.
Example: calling a script "view.php" with city set to "Martha's
Vinyard" URL-encoded will generate a DB error when the city is passed
to a database query...
http://mywebsite.com/view.php?city=Martha%27s+Vinyard
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=22424&edit=1