Re: Why do form submissions need stripslashes() invocations?

Hi Rasmus! Thanks for your explanation. Unfortunately I am using a server on which I do not have write access to php.ini. I have also been noticing that a submitted \" is received as " when I use stripslashes() thus stripslashes() is not a totally safe alternative. Is there a way that I can achieve the magic_quotes_gpc effect without modifying the php.ini file? I guess I can do a set_magic_quotes_runtime(0); I am not sure if this is what I need in my situation. Thanks, and thanks for PHP!!! Neil On Sun, 9 Sep 2001, Rasmus Lerdorf wrote: > > I would like to know why PHP adds slashes to the double quote, > > single quote, and backslash characters when submitting a form. > > In particular it would be nice if the PHP manual or some other > > manual mentioned this but I could not find any official > > documentation on this issue. Why does PHP add the > > slashes in the first place? (I'm using PHP 4.0.4pl1 > > and don't know if this is just a bug or whether > > it was meant to be this way). > > It is meant to be this way because so many scripts out there send form > data directly to databases where these need to be escaped. You can change > this behaviour with the magic_quotes_gpc directive in your php.in file. > See http://www.php.net/manual/en/configuration.php > > -Rasmus >