note 21624 added to function.get-magic-quotes-gpc
| From: | jausions@php.net | Date: | Tue, 21 May 2002 16:40:47 +0000 |
| Subject: | note 21624 added to function.get-magic-quotes-gpc | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-30847@lists.php.net to get a copy of this message | ||
About POST, Magic Quotes EGPCS and file upload on Windows:
Be careful when using the "stripslashes" function recursively on the input array
($_REQUEST for instance.) It's most likely that you will strip valid backslashes from the
tmp_name path. The path to the temporary file doesn't seem to be treated with magic quotes (if
ON). The result is a mix of "Magic quoted" and not "Magic quoted" values in the
input array (i.e. $_REQUEST). Bug or not, be aware...
P.S.: The problem is understandable since the temporary path is not something the user submitted,
but set by PHP.
P.P.S.: My PHP version is 4.2.0.
--
http://www.php.net/manual/en/function.get-magic-quotes-gpc.php
http://master.php.net/manage/user-notes.php?action=edit+21624
http://master.php.net/manage/user-notes.php?action=delete+21624
http://master.php.net/manage/user-notes.php?action=reject+21624