mark_nsx Posted March 18, 2008 Share Posted March 18, 2008 Hi there. I have recently installed xampp with magic_quotes_gpc turned On in php.ini and when i try inserting a string with quotes in it, it doesn't appear to escape the string automatically..any ideas where could it have gone wrong? thanks! Quote Link to comment Share on other sites More sharing options...
PFMaBiSmAd Posted March 18, 2008 Share Posted March 18, 2008 It is likely that the php.ini that you changed is not the one that php is using or you did not stop and start your web server to get the change to take effect. All the magic quote settings have been eliminated in php6. Unless you want to go back and find and fix all your code so that it will work under php6, it is best to turn all the magic quotes settings OFF and make sure your code escapes data itself. One of the big reason why magic quotes have been eliminated is they don't escape all the special characters that can break a database query, so you really need to un-escape any data gotten due to magic quotes being on and then use a proper escape function like mysql_real_escape_string() Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.