magic_quotes_gpc is not on by default anymore

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@324587 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
Jakub Vrana 2012-03-27 18:59:52 +00:00
parent 813a3239bc
commit b18da506de
2 changed files with 3 additions and 3 deletions

View file

@ -37,8 +37,8 @@
</para>
<para>
The PHP directive <link linkend="ini.magic-quotes-gpc">
magic_quotes_gpc</link> is <literal>on</literal> by default, and it
essentially runs <function>addslashes</function> on all GET, POST,
magic_quotes_gpc</link> was <literal>on</literal> by default before PHP 5.4, and it
essentially ran <function>addslashes</function> on all GET, POST,
and COOKIE data. Do not use <function>addslashes</function> on
strings that have already been escaped with
<link linkend="ini.magic-quotes-gpc">magic_quotes_gpc</link> as you'll

View file

@ -25,7 +25,7 @@
<para>
An example use of <function>stripslashes</function> is when the PHP
directive <link linkend="ini.magic-quotes-gpc">magic_quotes_gpc</link>
is <literal>on</literal> (it's on by default), and you aren't inserting
is <literal>on</literal> (it was on by default before PHP 5.4), and you aren't inserting
this data into a place (such as a database) that requires escaping.
For example, if you're simply outputting data straight from an HTML form.
</para>