Re: %27 and ' - urlencode
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.lang.php archive

Re: %27 and ' - urlencode

From: Geoff Berrow <blthecat@ckdog.co.uk>
Date: Fri Sep 09 2005 - 14:10:44 CEST

I noticed that Message-ID: <43216bc2$1@news1.homechoice.co.uk> from
elyob contained the following:

>Great stuff. Thanks for that, the default php.ini had this. It's now gone. I
>seem to remember one of the main PHP developers writing that magic quotes is
>stupid and should be dropped.

You only need to url encode data that is going in a URL (duh...).
 
And don't forget that your database security is now down to you in this
and all future projects.

(you could have just used stripslashes() )

-- 
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Received on Tue Oct 18 02:20:56 2005