Re: Malicious SQL
| From: | John W. Holmes | Date: | Wed, 07 Jul 2004 20:53:51 +0000 |
| Subject: | Re: Malicious SQL | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-189901@lists.php.net to get a copy of this message | ||
Matthew Sims wrote:
I think a good programming habit it to treat it as if it were off.With regards to magic_quotes_gpc, you can't just "treat it as if it were off" otherwise you may end up escaping data twice if it's not really off on a server that runs your code. Detect it's value with get_magic_quotes_gpc() and act accordingly. -- ---John Holmes... Amazon Wishlist: www.amazon.com/o/registry/3BEXC84AB3A5E/ php|architect: The Magazine for PHP Professionals – www.phparch.com