Re: [Fwd: Re: [PEAR-DEV] Re: magic_quotes_runtime and portability]
| From: | Greg Beaver | Date: | Tue, 25 Nov 2003 22:04:52 +0000 |
| Subject: | Re: [Fwd: Re: [PEAR-DEV] Re: magic_quotes_runtime and portability] | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-23880@lists.php.net to get a copy of this message | ||
Alan Knowles wrote:
magic_quotes is an absolute pig ear for compatibility - the amount of code needed to fix the mess it causes is disproportiate to the benefit it gives.. As far as I can see packages that need to quote data (eg. databases/shell scripts) should always assume the data is 'dirty'.. and do their own escaping/quoting. _Applications_ that use PEAR packages have the responsibility, to determine what is the valid state of magic_quotes and, unescape/stripslashes data before sending to a pear package if they even permit magic_quotes to be on...Agreed. However, the PEAR installer qualifies as an application that uses PEAR packages. If it turns out to be impossible to fix I will mark it as "won't fix," otherwise, I'll fix it :) Regards, Greg