note 21624 deleted from function.get-magic-quotes-gpc by aidan
| From: | aidan@php.net | Date: | Tue, 06 Jul 2004 06:20:47 +0000 |
| Subject: | note 21624 deleted from function.get-magic-quotes-gpc by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-72702@lists.php.net to get a copy of this message | ||
Note Submitter: jausions N@-SpAm dot hotmail.com
----
About POST, Magic Quotes EGPCS and file upload on Windows:
Be careful when using the "stripslashes" function recursively on the input array
($_REQUEST for instance.) It's most likely that you will strip valid backslashes from the
tmp_name path. The path to the temporary file doesn't seem to be treated with magic quotes (if
ON). The result is a mix of "Magic quoted" and not "Magic quoted" values in the
input array (i.e. $_REQUEST). Bug or not, be aware...
P.S.: The problem is understandable since the temporary path is not something the user submitted,
but set by PHP.
P.P.S.: My PHP version is 4.2.0.