note 99739 added to function.addslashes

from: Danijel Pticar <?php function as_array(&$arr_r) { foreach ($arr_r as &$val) is_array($val) ? as_array($val):$val=addslashes($val); unset($val); } as_array($_POST); ?> Adding htmlspecialchars() to the $val should prevent submission of bad javascript... so: <?php function as_array(&$arr_r) { foreach ($arr_r as &$val) is_array($val) ? as_array($val):$val=htmlspecialchars(addslashes($val)); unset($val); } as_array($_POST); ?> ---- Server IP: 69.147.83.197 Probable Submitter: 212.71.74.2 ---- Manual Page -- http://www.php.net/manual/en/function.addslashes.php Edit -- https://master.php.net/note/edit/99739 Del: integrated -- https://master.php.net/note/delete/99739/integrated Del: useless -- https://master.php.net/note/delete/99739/useless Del: bad code -- https://master.php.net/note/delete/99739/bad+code Del: spam -- https://master.php.net/note/delete/99739/spam Del: non-english -- https://master.php.net/note/delete/99739/non-english Del: in docs -- https://master.php.net/note/delete/99739/in+docs Del: other reasons-- https://master.php.net/note/delete/99739 Reject -- https://master.php.net/note/reject/99739 Search -- https://master.php.net/manage/user-notes.php