Re: Disable magic quote by default.
| From: | Yasuo Ohgaki | Date: | Sun, 17 Feb 2002 03:50:34 +0000 |
| Subject: | Re: Disable magic quote by default. | ||
| References: | 1 2 3 4 5 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-80111@lists.php.net to get a copy of this message | ||
Lars Torben Wilson wrote:
On Sat, 2002-02-16 at 18:01, Yasuo Ohgaki wrote: *SNIP*
The WTF factor for that would be off the scale. Think about how many bug reports about addslashes() not working we'd have to bogusify. -1I agree. That's why I thought it may be better to wait until PHP5 and I promised to edit the manual now ;) In PHP5, there are compatibility issues anyway. IMHO, magic quote is handly for very simple applications but not for more complex applications. It's also not a recommended way to rely on to secure code. I guess majority of PHP application developers are willing to get rid of magic_quote_gpc=On support from thier code. Anyone willing to maintain compatibility for magic_quote_gpc=On setting for your scripts? Any comments? -- Yasuo Ohgaki