Re: Magic quotes in trunk
| From: | Johannes Schlüter | Date: | Thu, 18 Nov 2010 16:44:30 +0000 |
| Subject: | Re: Magic quotes in trunk | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-50362@lists.php.net to get a copy of this message | ||
On Thu, 2010-11-18 at 18:34 +0200, Arvids Godjuks wrote:
> As I remember correctly - taint's are designed to be used while developing.
>
> They can be used in production (and 4-5% performance hit for the
> security isn't much until you run something really big), but mostly
> people will test it out on dev and deploy on production without
> taints.
> Still, I'd like to see them implemented allready. Will be one big + for PHP :)
For people with proper development environments removing magic_quotes is
a great thing. They (hopefully) know better what they are doing. The
issue are users who have no idea what they are doing. So a
development-only feature won't help.
johannes