jordanwb Posted September 3, 2008 Share Posted September 3, 2008 ...does this mean that quotes will always have slashes or always won't have slashes? Also will get_magic_quotes_gpc () be removed? Quote Link to comment Share on other sites More sharing options...
Wolphie Posted September 3, 2008 Share Posted September 3, 2008 Slashes will not always have slashes if it's removed. Since most people remove them any way before inserting data into the database. Yes, I think from reading about it that everything related to magic quotes will be removed. Quote Link to comment Share on other sites More sharing options...
jordanwb Posted September 3, 2008 Author Share Posted September 3, 2008 Slashes will not always have slashes if it's removed. :-\ Yes, I think from reading about it that everything related to magic quotes will be removed. Ok. Quote Link to comment Share on other sites More sharing options...
DarkWater Posted September 3, 2008 Share Posted September 3, 2008 In PHP6, all traces of magic_quotes_gpc and register_globals will be gone. Therefore, all data sanitation will be up to the programmer, and they can't rely on magically populated variables. Quote Link to comment Share on other sites More sharing options...
Wolphie Posted September 3, 2008 Share Posted September 3, 2008 Slashes will not always have slashes Sorry, bit sleepy. Should be: "Quotes will not always have slashes" Quote Link to comment Share on other sites More sharing options...
jordanwb Posted September 3, 2008 Author Share Posted September 3, 2008 Sorry, bit sleepy. I know how you feel. Therefore, all data sanitation will be up to the programmer, That's what I wanted to know. Quote Link to comment Share on other sites More sharing options...
Wolphie Posted September 3, 2008 Share Posted September 3, 2008 Luckily you have functions like mysql_real_escape_string(), htmlentities() etc.. to help you with user inputted data sanitation. But yes, as DW said; everything relating to magic quotes will be deprecated. Quote Link to comment Share on other sites More sharing options...
PFMaBiSmAd Posted September 3, 2008 Share Posted September 3, 2008 It is my understanding that the state flags for the magic quotes settings (and perhaps any functions that return those state flags) will exist and return false so that existing code that is correctly checking if they are on and removing the slashes will work as is (the flags will be off, so the code will skip the stripslashes() function call.) Quote Link to comment Share on other sites More sharing options...
PFMaBiSmAd Posted September 4, 2008 Share Posted September 4, 2008 In the current php6 development version, get_magic_quotes_gpc() exists but returns bool(false). Quote Link to comment Share on other sites More sharing options...
jordanwb Posted September 4, 2008 Author Share Posted September 4, 2008 In the current php6 development version, get_magic_quotes_gpc() exists but returns bool(false). That's good because if it's not it may break existing scripts. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.