#44748 [Opn->Asn]: php.ini comments on magic_quotes_gpc promote bad practices

ID: 44748 Updated by: kalle@php.net Reported By: johnston dot joshua at gmail dot com -Status: Open +Status: Assigned Bug Type: Documentation problem Operating System: any PHP Version: Irrelevant -Assigned To: +Assigned To: kalle Previous Comments: ------------------------------------------------------------------------ [2008-04-16 19:34:47] johnston dot joshua at gmail dot com Description: ------------ The section at the top related to magic_quotes_gpc suggests addslashes() for database escaping. It should instead say to use your the escaping function that is native to your database extension. ; - magic_quotes_gpc = Off [Performance] ; Input data is no longer escaped with slashes so that it can be sent into ; SQL databases without further manipulation. Instead, you should use the ; function addslashes() on each input element you wish to send to a database. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=44748&edit=1