Re: cvs: php3 / php3.ini-dist

magic_quotes_gpc always default to off in in php3, at least as far as i've looked. the switch was added to configure.in in october 1997. http://cvs.php.net/viewcvs.cgi/php3/configure.in.diff?r1=1.77&r2=1.78 php4 does have a different default, it was changed very early in the php4 cycle. http://cvs.php.net/viewcvs.cgi/php4/main/main.c.diff?r1=1.3&r2=1.4 it looks to me like the --enable-magic-quotes option to configure is ignored by php4, too. it should probably be removed or fixed. but i could easily be misreading things. someone could actually test if they were eager to figure it out. :) jim On Sun, Feb 11, 2001 at 01:32:58AM -0800, Rasmus Lerdorf wrote: > Hrm.. When was this changed in PHP 3? It used to be on by default. And > it is on by default in PHP 4. > > -Rasmus > > On Sat, 10 Feb 2001, Jim Winstead wrote: > > > jimw Sat Feb 10 11:43:58 2001 EDT > > > > Modified files: > > /php3 php3.ini-dist > > Log: > > we claim php3.ini documents the defaults, but magic_quotes_gpc defaults to off unless > > --enable-magic-quotes is used in compiling > > > > Index: php3/php3.ini-dist > > diff -u php3/php3.ini-dist:1.57 php3/php3.ini-dist:1.58 > > --- php3/php3.ini-dist:1.57 Wed Feb 23 14:57:21 2000 > > +++ php3/php3.ini-dist Sat Feb 10 11:43:58 2001 > > @@ -110,7 +110,7 @@ > > ;;;;;;;;;;;;;;;;; > > ; Data Handling ; > > ;;;;;;;;;;;;;;;;; > > -magic_quotes_gpc = On ; magic quotes for incoming GET/POST/Cookie data > > +magic_quotes_gpc = Off ; magic quotes for incoming GET/POST/Cookie data > > magic_quotes_runtime= Off ; magic quotes for runtime-generated data, e.g. data from SQL, > > from exec(), etc. > > magic_quotes_sybase = Off ; Use Sybase-style magic quotes (escape ' with > > '' instead of \') > > track_vars = On ; enable $HTTP_GET_VARS[], $HTTP_POST_VARS[] and $HTTP_COOKIE_VARS[] > > arrays