magic_quotes on the environment?
| From: | Shane Caraveo | Date: | Sun, 02 Mar 2003 23:35:27 +0000 |
| Subject: | magic_quotes on the environment? | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-94731@lists.php.net to get a copy of this message | ||
Even though magic_quotes_gpc is documented to addslashes to get/post/cookie, it also does it to the environment. This probably doesn't effect linux as much as windows, where all paths get escaped if magic_quotes_gpc is on.
I find this rather anoying since I am trying to build environments for process execution (executing php again) and nothing was working due to magic_quotes_gpc (ie. I was not escaping env vars I was creating, then php would unescape the data prior to executing).
I'm not convinced that escaping environment data is the correct thing to do in the first place, and I would like to change php to not escape env vars if magic_quotes_gpc is on. Any opinions on this?
Shane