note 64082 added to security.magicquotes

Actually, Magic quotes are extremely useful. In database applications (where virtually all user-submitted input ends up in a database), magic_quotes is very important. Yes, it's a timesaver, but the main advantage is safety: you can't accidentally get an SQL injection attack. Slight downside of magic_quotes: sometimes you forget to stripslashes(), and get additional unneeded backslashes. Major disadvantage of not having them: if you forget an addslashes(), your database will get own3d pretty quickly! No programmer is perfect, and I'd much rather fail safe than sorry. ---- Server IP: 85.116.0.130 Probable Submitter: 217.169.17.170 ---- X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/security.magicquotes.php Edit -- http://master.php.net/note/edit/64082 Del: integrated -- http://master.php.net/note/delete/64082/integrated Del: useless -- http://master.php.net/note/delete/64082/useless Del: bad code -- http://master.php.net/note/delete/64082/bad+code Del: spam -- http://master.php.net/note/delete/64082/spam Del: non-english -- http://master.php.net/note/delete/64082/non-english Del: in docs -- http://master.php.net/note/delete/64082/in+docs Del: other reasons-- http://master.php.net/note/delete/64082 Reject -- http://master.php.net/note/reject/64082 Search -- http://master.php.net/manage/user-notes.php