#30527 [Opn->Fbk]: magic_quotes_gpc does not work per-directory

ID: 30527 Updated by: sniper@php.net Reported By: andrew at crannog-software dot com -Status: Open +Status: Feedback Bug Type: PHP options/info functions Operating System: Windows 2000 PHP Version: 4.3.9 New Comment: Using PHP as CGI binary or ISAPI module? Previous Comments: ------------------------------------------------------------------------ [2004-11-21 18:42:39] hans at velum dot net I can confirm this on Windows 2003 w/ IIS 6 also. Note that the magic_quotes_sybase INI setting is also being ignored. Basically it's always doing magic_quotes_gpc -- despite the phpinfo() / ini_get showing the desired per-directory values. ------------------------------------------------------------------------ [2004-10-22 11:43:25] andrew at crannog-software dot com Description: ------------ When magic_quotes_gpc is controlled per-directory through the registry, the return code from get_magic_quotes_gpc() reflects the change, but the contents of $_GET, $_POST and $_COOKIE remain escaped or not escaped according to the setting in php.ini. The code below was run with magic_quotes_gpc=on in php.ini and magic_quotes_gpc="0" in the registry for the folder in which the script resides. Reproduce code: --------------- <html> <body> magic_quotes_gpc is <?php echo get_magic_quotes_gpc() ? "on" : "off"; ?><br /> text: <?php echo $_REQUEST['text']; ?><br /> <form action="test.php"> <input name="text" />&nbsp;<input type="submit" /> </form> </body> </html> Expected result: ---------------- magic_quotes_gpc is off text: "test" Actual result: -------------- magic_quotes_gpc is off text: \"test\" ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=30527&edit=1