always enable addslashes

[Tarscher]

Hi all,

Is there a way I can always enable addslashes by including a line of
code to the top of my pages?

Thanks in advance
Stijn

[Curtis]

If you have access to php.ini, you can set the magic_quotes_gpc
variable to "On". Alternatively, you can set it using the ini_set
function in your scripts (See: http://php.net/ini_set).

However, it would be better if you just escaped input on your own, and
having PHP automatically add slashes is a nuisance if you already do.

Curtis

On Dec 12, 1:48 am, "Tarscher" <[e-mail]:

Hi all,

Is there a way I can always enable addslashes by including a line of
code to the top of my pages?

Thanks in advance
Stijn

[Michael Fesser]

..oO(Curtis)

>If you have access to php.ini, you can set the magic_quotes_gpc
variable to "On".

Magic quotes are dead. They will be removed in PHP 6.

>However, it would be better if you just escaped input on your own

That's the only reliable and secure way. For example addslashes() can't
know what other escaping might be necessary when inserting data into a
database. That's why functions like mysql_real_escape_string() exist.

Micha

[Toby Inkster]

Curtis wrote:

However, it would be better if you just escaped input on your own, and
having PHP automatically add slashes is a nuisance if you already do

And PHP *not* adding slashes is a nuisance if you already use stripslashes().

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact

[Curtis]

Very good points, Michael and Toby, thanks for making those
additions.It's good to hear that it's going in PHP 6, I haven't been
keeping up too well on what's going on with PHP 6, so I'll have to
check out what's going on in more detail.

[Michael Fesser]

..oO(Curtis)

>Very good points, Michael and Toby, thanks for making those
additions.It's good to hear that it's going in PHP 6, I haven't been
keeping up too well on what's going on with PHP 6, so I'll have to
check out what's going on in more detail.

Old, but still interesting:

Minutes PHP Developers Meeting
http://www.php.net/~derick/meeting-notes.html

Micha