note 21624 added to function.get-magic-quotes-gpc

From: Date: Tue, 21 May 2002 16:40:47 +0000
Subject: note 21624 added to function.get-magic-quotes-gpc
Groups: php.notes 
Request: Send a blank email to php-notes+get-30847@lists.php.net to get a copy of this message
About POST, Magic Quotes EGPCS and file upload on Windows: Be careful when using the "stripslashes" function recursively on the input array ($_REQUEST for instance.) It's most likely that you will strip valid backslashes from the tmp_name path. The path to the temporary file doesn't seem to be treated with magic quotes (if ON). The result is a mix of "Magic quoted" and not "Magic quoted" values in the input array (i.e. $_REQUEST). Bug or not, be aware... P.S.: The problem is understandable since the temporary path is not something the user submitted, but set by PHP. P.P.S.: My PHP version is 4.2.0. -- http://www.php.net/manual/en/function.get-magic-quotes-gpc.php http://master.php.net/manage/user-notes.php?action=edit+21624 http://master.php.net/manage/user-notes.php?action=delete+21624 http://master.php.net/manage/user-notes.php?action=reject+21624

« previous php.notes (#30847) next »