note 69187 rejected from security.magicquotes by bjori
| From: | bjori@php.net | Date: | Sat, 26 Aug 2006 11:17:26 +0000 |
| Subject: | note 69187 rejected from security.magicquotes by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-116341@lists.php.net to get a copy of this message | ||
Note Submitter: rn214 at cam dot ac dot uk
----
In my view, removing the magic_quotes feature is a big mistake. For anything involving a database,
it is not only time-saving, but also guarantees failsafe behaviour.
- With magic_quotes on, forgetting to call stripslashes causes, at worst, an ugly backslash in the
middle of some text.
- With magic_quotes off, forgetting to call addslashes causes, at worst, a database compromise.
I know which I'd rather deal with! So, since it is going away, how do we code-around it? Is
there a simple way to re-implement the feature?