Re: note 69187 rejected and deleted from security.magicquotes by notes editor bjori

Sorry about that. My fault entirely for appending a query to the remark. My intention was to explain why magic_quotes is a good thing (and to answer the various points suggesting otherwise). I realised just after hitting the submit button that I shouldn't have appended a question to the information. Shall I resubmit the note thus:? -- Why magic_quotes is useful: For anything involving a database, it is not only time-saving, but also guarantees failsafe behaviour. - With magic_quotes on, forgetting to call stripslashes causes, at worst, an ugly backslash in the middle of some text. - With magic_quotes off, forgetting to call addslashes causes, at worst, a database compromise. --- Richard php-notes@lists.php.net wrote:

You are receiving this email because your note posted to the online PHP manual has been removed by one of the editors. Read the following paragraphs carefully, because they contain pointers to resources better suited for requesting support or reporting bugs, none of which are to be included in manual notes because there are mechanisms and groups in place to deal with those issues. The user contributed notes are not an appropriate place to ask questions, report bugs or suggest new features; please use the resources listed on <http://php.net/support> for those purposes. This was clearly stated in the page you used to submit your note, please carefully re-read those instructions before submitting future contributions. Bug submissions and feature requests should be entered at <http://bugs.php.net/>. For documentation errors use the bug system, and classify the bug as "Documentation problem". Support and ways to find answers to your questions can be found at <http://php.net/support>. Your note has been removed from the online manual. ----- Copy of your note below ----- In my view, removing the magic_quotes feature is a big mistake. For anything involving a database, it is not only time-saving, but also guarantees failsafe behaviour. - With magic_quotes on, forgetting to call stripslashes causes, at worst, an ugly backslash in the middle of some text. - With magic_quotes off, forgetting to call addslashes causes, at worst, a database compromise. I know which I'd rather deal with! So, since it is going away, how do we code-around it? Is there a simple way to re-implement the feature?