note 76163 added to function.get-magic-quotes-gpc

The magic_quotes_gpc = On setting in php.ini is an unfortunate flaw in php which is not a convenience but a source of many bugs and a performance penalty. Decent programmers all know that special characters such as single quotes need to be escaped in string values of an SQL statement. The magic_quotes_gpc = On setting wants to do this for programmers but fails to realize that post or get data usually are validated first. If the data are not valid, they are sent back to the browser for resubmission. In this case, the slashes added to the data are doubled after the next submission, thus causing bugs. ---- Server IP: 66.207.199.35 Probable Submitter: 209.135.98.254 ---- Manual Page -- http://www.php.net/manual/en/function.get-magic-quotes-gpc.php Edit -- https://master.php.net/note/edit/76163 Del: integrated -- https://master.php.net/note/delete/76163/integrated Del: useless -- https://master.php.net/note/delete/76163/useless Del: bad code -- https://master.php.net/note/delete/76163/bad+code Del: spam -- https://master.php.net/note/delete/76163/spam Del: non-english -- https://master.php.net/note/delete/76163/non-english Del: in docs -- https://master.php.net/note/delete/76163/in+docs Del: other reasons-- https://master.php.net/note/delete/76163 Reject -- https://master.php.net/note/reject/76163 Search -- https://master.php.net/manage/user-notes.php