Stripslashes

Encenta.com · 02-23-2006, 02:18 PM

Hey, been using addslashes and stripslashes all this time but I've been told this is wrong. Can anyone give me the low-down on magicquotes? Thanks

{insert name here} · 02-23-2006, 02:23 PM

If you want to understand it better, you should readthis

sdsinc · 02-23-2006, 03:17 PM

Simply put magic quotes are the bane of PHP. To make things worse magic quotes settings can vary from one server to another. Please note that since PHP 4.0x magic quotes are disabled by default.
Of course people on a shared server do not have access to the PHP config file so it's best practice to design portable code so you don't depend on server-specific settings.
????: NamePros.com http://www.namepros.com/programming/170544-stripslashes.html

I use this piece of code in a config file (as an include at the beginning of my scripts) so as to avoid finding unwanted \ in my form requests

PHP Code:

  if (get_magic_quotes_gpc()) {

????: NamePros.com http://www.namepros.com/showthread.php?t=170544
    function stripslashes_deep($value) {

        $char_array = array();

        $value = is_array($value) ? array_map('stripslashes_deep', $value) : strtr(stripslashes($value), $char_array);

        return $value;

    }

    $_POST = array_map('stripslashes_deep', $_POST);

    $_GET = array_map('stripslashes_deep', $_GET);

    $_COOKIE = array_map('stripslashes_deep', $_COOKIE);

}

Encenta.com · 02-23-2006, 03:38 PM

Thanks for the help guys..and girls

egkuan · 02-24-2006, 01:56 AM

well I always use this function at the beginning of scripts:

PHP Code:

  function unmagic_quotes()

{

    for($i = 0; $i < func_num_args(); $i++)

????: NamePros.com http://www.namepros.com/showthread.php?t=170544
    {

        $temp = func_get_arg($i);

        if(is_array($temp))

        {

            foreach($temp as $key => $val)

            {

                if(is_array($GLOBALS[$key]))

                {

????: NamePros.com http://www.namepros.com/showthread.php?t=170544
                    _unmagic_quotes($GLOBALS[$key]);

                }

            }

        }

        else

        {

            stripslashes($GLOBALS[$key]);

        }

    }

}

if(get_magic_quotes_gpc())

{

    unmagic_quotes($_GET $_POST, $_REQUEST, $_COOKIE);

}

if(get_magic_quotes_runtime())

{

    set_magic_quotes_runtime(0);

}

And it works

02-23-2006, 02:18 PM	THREAD STARTER #1 (permalink)
Encenta.com SQLdumpster.com Join Date: Jun 2005 Location: West Sussex, UK Posts: 579 Follow @MiseriaSK	Stripslashes Hey, been using addslashes and stripslashes all this time but I've been told this is wrong. Can anyone give me the low-down on magicquotes? Thanks __________________ SQL Dumpster - SQL Database Dumps and Resources

02-23-2006, 02:23 PM	#2 (permalink)
{insert name here} Senior Member Join Date: Dec 2004 Posts: 1,304	If you want to understand it better, you should readthis __________________ You got no time for the messenger, got no regard for the thing that you don't understand, you got no fear of the underdog, that's why you will not survive!

02-23-2006, 03:17 PM	#3 (permalink)
sdsinc Domains my Dominion Join Date: Aug 2005 Location: Web 1.0 Posts: 9,963	Simply put magic quotes are the bane of PHP. To make things worse magic quotes settings can vary from one server to another. Please note that since PHP 4.0x magic quotes are disabled by default. Of course people on a shared server do not have access to the PHP config file so it's best practice to design portable code so you don't depend on server-specific settings. ????: NamePros.com http://www.namepros.com/programming/170544-stripslashes.html I use this piece of code in a config file (as an include at the beginning of my scripts) so as to avoid finding unwanted \ in my form requests PHP Code: if (get_magic_quotes_gpc()) { ????: NamePros.com http://www.namepros.com/showthread.php?t=170544 function stripslashes_deep($value) { $char_array = array(); $value = is_array($value) ? array_map('stripslashes_deep', $value) : strtr(stripslashes($value), $char_array); return $value; } $_POST = array_map('stripslashes_deep', $_POST); $_GET = array_map('stripslashes_deep', $_GET); $_COOKIE = array_map('stripslashes_deep', $_COOKIE); } __________________ NameNewsletter.com - free lists of available domain names ZoneFiles.net (beta) - ccTLD and gTLD droplists

02-23-2006, 03:38 PM	THREAD STARTER #4 (permalink)
Encenta.com SQLdumpster.com Join Date: Jun 2005 Location: West Sussex, UK Posts: 579 Follow @MiseriaSK	Thanks for the help guys..and girls __________________ SQL Dumpster - SQL Database Dumps and Resources

02-24-2006, 01:56 AM	#5 (permalink)
egkuan NamePros Member Join Date: Feb 2006 Posts: 36	well I always use this function at the beginning of scripts: PHP Code: function unmagic_quotes() { for($i = 0; $i < func_num_args(); $i++) ????: NamePros.com http://www.namepros.com/showthread.php?t=170544 { $temp = func_get_arg($i); if(is_array($temp)) { foreach($temp as $key => $val) { if(is_array($GLOBALS[$key])) { ????: NamePros.com http://www.namepros.com/showthread.php?t=170544 _unmagic_quotes($GLOBALS[$key]); } } } else { stripslashes($GLOBALS[$key]); } } } if(get_magic_quotes_gpc()) { unmagic_quotes($_GET $_POST, $_REQUEST, $_COOKIE); } if(get_magic_quotes_runtime()) { set_magic_quotes_runtime(0); } And it works

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
how can i have multiple stripslashes in mail script?	sedokill	Programming	3	09-24-2005 04:26 PM
Wierd stripslashes() error.	mholt	Programming	0	09-05-2005 12:04 PM