Re: Magic quotes in trunk
| From: | Philip Olson | Date: | Thu, 18 Nov 2010 05:19:05 +0000 |
| Subject: | Re: Magic quotes in trunk | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-50319@lists.php.net to get a copy of this message | ||
> What are your inputs on this matter?
I'm struggling with this topic. We must do something, but it's important to understand
that plenty of people unknowingly rely upon this security feature that's still enabled by
default. Granted 5.3 does generate E_DEPRECATED errors when magical quotes are enabled, but is one
minor PHP version of errors enough to go from on to gone?
So while those in the know (e.g., people who follow this list) find them annoying and wish they
never existed, what are the implications? I'm still unsure how best to handle this situation
but wanted to express these feelings now. Whatever the case, the education effort towards data
filtering and sanitization requires a lot of improvement.
Regards,
Philip