Posted by "messju mohr" on 01/14/06 17:51

On Sat, Jan 14, 2006 at 04:43:32PM +0100, dforums wrote:
> I understood that it was linked but for security issue it is out of
> question that I set it to off.
>
> Please give me a secure answer.

smarty doesn't work with magic_quotes_runtime enabled. period.
maybe you are confusing magic_quotes_gpc and magic_quotes_runtime.

> I suppose the code must be change a little.

you want to "raise security" by enabling something confusing like
magic_quotes_runtime that emits backslashes at weird places here and
there? and to work against it's behaviour you want to tamper a bit
with 3rd party code (the smarty compiler in this case)? please don't.

> regards
>
> david bigand
>
>
> messju mohr a écrit :
>
> >On Sat, Jan 14, 2006 at 02:35:42PM +0100, dforums wrote:
> >
> >
> >>I got the following message with smarty.
> >>
> >>*Fatal error*: Smarty error: [in home.html line 1]: syntax error:
> >>invalid attribute name: 'entete.html\' (Smarty_Compiler.class.php, line
> >>1531) in */home/julie-envy/dev/class/libs/Smarty.class.php* on line *1095
> >>
> >>
> >
> >turn off magic_quotes_runtime in php.ini or via ini_set().
> >
> >
> >
> >>Could you tell me, why ?
> >>And what to do ?
> >>
> >>I use php 5.0.4
> >>
> >>Regards
> >>
> >>David
> >>*
> >>
> >>
> >
> >
> >
> >

[Back to original message]