diff --git a/reference/strings/functions/addslashes.xml b/reference/strings/functions/addslashes.xml index 3de878c220..e1fbba8576 100644 --- a/reference/strings/functions/addslashes.xml +++ b/reference/strings/functions/addslashes.xml @@ -37,8 +37,8 @@ The PHP directive - magic_quotes_gpc is on by default, and it - essentially runs addslashes on all GET, POST, + magic_quotes_gpc was on by default before PHP 5.4, and it + essentially ran addslashes on all GET, POST, and COOKIE data. Do not use addslashes on strings that have already been escaped with magic_quotes_gpc as you'll diff --git a/reference/strings/functions/stripslashes.xml b/reference/strings/functions/stripslashes.xml index fb6d26cb39..053d3dc5be 100644 --- a/reference/strings/functions/stripslashes.xml +++ b/reference/strings/functions/stripslashes.xml @@ -25,7 +25,7 @@ An example use of stripslashes is when the PHP directive magic_quotes_gpc - is on (it's on by default), and you aren't inserting + is on (it was on by default before PHP 5.4), and you aren't inserting this data into a place (such as a database) that requires escaping. For example, if you're simply outputting data straight from an HTML form.