note 49399 deleted from security.magicquotes by danbrown

Note Submitter: nitrous at fuckoff dot com ---- This "feature" is the cause of so many escaping problems. It's very important to understand the implications of what magic quotes really do. Nearly every call, except those being written directly to the database, using user submitted data will require a call to strip_slashes. It gets very ugly very fast. What should be done is proper escaping of shell parameters and database parameters. PHP provides several escaping functions intended for this purpose. Slashes alone don't cut it anyway.