Re: escape characters added to form data
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.lang.php archive

Re: escape characters added to form data

From: Geoff Berrow <blthecat@ckdog.co.uk>
Date: Sat Sep 24 2005 - 17:37:59 CEST

I noticed that Message-ID: <433476c3$0$23443$ba620e4c@news.skynet.be>
from O'Hara contained the following:

>Problem solved.
>I needed to turn off magic_quotes_gpc in /etc/php.ini
>
>magic_quotes_gpc = Off
>
>Sorry if this was a VFAQ.
>As for the usefulness of these magic quotes...

Could be very useful if you find yourself on the wrong end of an
injection attack...

-- 
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Received on Tue Oct 18 02:27:36 2005