TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

PHP 'magic_quotes_gpc' Directive Security Bypass Weakness

5 pointsby hm2kover 13 years ago

1 comment

pilifover 13 years ago
while I agree that a feature not working as intended is a bad thing, magic_quotes_gpc also is a very, very bad idea, is deprecated for years and is going to be gone from PHP 5.4.<p>Also, it never worked right ever since PHP supported more than just MySQL and mSQL (and even for these databases it doesn't work any more, especially since the advent of Unicode)<p>In fact, it works so badly that projects usually go out of their way to turn this mis-feature off or work around it before even looking at input data.<p>As such, I really think this is not newsworthy enough because applications still relying on this mis-feature already have different issues anyways (and are likely not running on hosts that can/want to update PHP)