note 64082 deleted from security.magicquotes by bjori

Note Submitter: rn214 at cam dot ac dot uk Reason: bad code ---- Actually, Magic quotes are extremely useful. In database applications (where virtually all user-submitted input ends up in a database), magic_quotes is very important. Yes, it's a timesaver, but the main advantage is safety: you can't accidentally get an SQL injection attack. Slight downside of magic_quotes: sometimes you forget to stripslashes(), and get additional unneeded backslashes. Major disadvantage of not having them: if you forget an addslashes(), your database will get own3d pretty quickly! No programmer is perfect, and I'd much rather fail safe than sorry.