note 43033 deleted from function.get-magic-quotes-gpc by aidan
| From: | aidan@php.net | Date: | Tue, 06 Jul 2004 06:19:14 +0000 |
| Subject: | note 43033 deleted from function.get-magic-quotes-gpc by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-72687@lists.php.net to get a copy of this message | ||
Note Submitter: Matt
----
IMHO it seems a lot of people dislike magic quotes - but I think they are important. The number one
priority in my mind is to avoid SQL injection attacks and this is where magic quotes work well.
Another words
- Force developers to get rid of magic quotes when they are displaying information to the user
BUT
- Always ensure that any SQL statements when used with user input will be SAFE avoiding an major
security breaches.
Magic quotes SHOULD NOT be removed from the PHP laungage, as disabling them is as simple as changing
the php.ini file. For those on shared servers - sorry but it's no surprise that the
administrators have left magic quotes on.