RE: [PHP] extract($_POST)
| From: | John W. Holmes | Date: | Sun, 27 Oct 2002 01:44:40 +0000 |
| Subject: | RE: [PHP] extract($_POST) | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-121567@lists.php.net to get a copy of this message | ||
> > Bottom line is that you want to use addslashes() or
magic_quotes_gpc()
> > on any variable you're going to insert into a query string. If
you're
> > inserting a variable that should be a number, make sure it is one.
>
> If I have magic quotes turned on, do I still need to worry about using
> addslashes?
No, it's automatic. You may want to program in a check that sees if
magic_quotes is on or off, though, and act accordingly.
---John Holmes...