What are the pros and cons for magic_quotes_gpc

[williamc]

My first impulse was to turn it off. But maybe I'm wrong. Or is it one
of those 6 of one half a dozen of the other things?

From what I'm seeing on a search it might improve performance slightly
but with some s/w there are security issues... (We have register_globals
turned off).

General working env. is mySql, but might switch to PostGres in the
future. Right now I'm using Perl::DBI to access the database, but that's
because I don't know PHP data access methods yet and have some already
written stuff to work with.

thx,

--williamc

[Jochen Daum]

Hi William!

On Mon, 15 Sep 2003 20:34:31 GMT, williamc
<te************@williamc.com> wrote:

My first impulse was to turn it off. But maybe I'm wrong. Or is it one
of those 6 of one half a dozen of the other things?

From what I'm seeing on a search it might improve performance slightly
but with some s/w there are security issues... (We have register_globals
turned off).

General working env. is mySql, but might switch to PostGres in the
future. Right now I'm using Perl::DBI to access the database, but that's
because I don't know PHP data access methods yet and have some already
written stuff to work with.

It does something for all scripts which is not the right thing for
some scripts, namely the scripts which deal with MSSQL, Informix and
Sybase databases. Thats why I turned it off.

But its really a protability issue, so the right thing is to cater for
both turned on and off.

Jochen
--
Jochen Daum - CANS Ltd.
PHP DB Edit Toolkit -- PHP scripts for building
database editing interfaces.
http://sourceforge.net/projects/phpdbedittk/

[williamc]

thx.

--wmc

Jochen Daum wrote:

Hi William! It does something for all scripts which is not the right thing for
some scripts, namely the scripts which deal with MSSQL, Informix and
Sybase databases. Thats why I turned it off.

But its really a protability issue, so the right thing is to cater for
both turned on and off.

Jochen
--
Jochen Daum - CANS Ltd.
PHP DB Edit Toolkit -- PHP scripts for building
database editing interfaces.
http://sourceforge.net/projects/phpdbedittk/

[Lothar Scholz]

Jochen Daum <jo*********@cans.co.nz> wrote in message news:<i9********************************@4ax.com>. ..

It does something for all scripts which is not the right thing for
some scripts, namely the scripts which deal with MSSQL, Informix and
Sybase databases. Thats why I turned it off.

But its really a protability issue, so the right thing is to cater for
both turned on and off.

And it does the wrong thing if you don't want to put the data into a database.
Okay you can get the raw data with another call but then it's becoming quite ugly.