|
|
Posted by Geoff Berrow on 09/09/05 15:10
I noticed that Message-ID: <43216bc2$1@news1.homechoice.co.uk> from
elyob contained the following:
>Great stuff. Thanks for that, the default php.ini had this. It's now gone. I
>seem to remember one of the main PHP developers writing that magic quotes is
>stupid and should be dropped.
You only need to url encode data that is going in a URL (duh...).
And don't forget that your database security is now down to you in this
and all future projects.
(you could have just used stripslashes() )
--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Navigation:
[Reply to this message]
|