Re: Re: policy on magic quotes
| From: | bertrand Gugger | Date: | Tue, 08 Feb 2005 09:13:20 +0000 |
| Subject: | Re: Re: policy on magic quotes | ||
| References: | 1 2 3 4 5 6 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-36045@lists.php.net to get a copy of this message | ||
Alan Knowles wrote:
As far as I know no packages actually modify the contents of $_GET/$_POST, they just read the data and clean it locally if necessary. If they return a filtered version of $_GET etc. then it should be indicated in the documentation.. Regards Alan Ok, I see your point ;)I will immediatly remove that direct cleaning on superglobals I have there, thanks. So the rule concerning PEAR packages could be: "So far as possible, remove the magic quotes only on local copies of GPC superglobals. Case the package *has to* clean directly on these superglobals, it should be indicated in the documentation.." Thanks à+ -- bertrand Gugger (toggg)