Hello,

Mapbender is not very decisive whether to use stripslashes on request parameters or not. We seem to indecisive if we assume magic_quotes_gpc to be on or off (it is on by default).

I suggest we add something like this to globalSettings.php

if (get_magic_quotes_gpc() === 1) {
   array_walk($_POST, 'stripslashes');
   array_walk($_GET, 'stripslashes');
}

By this, all input would be properly prepared, and no stripslashing would have to occur.

What do you think?

Christoph

--

----------------------------------

FOSSGIS Konferenz 2009
17.-19. März 2009 in Hannover
http://www.fossgis.de/konferenz

----------------------------------
_______________________________________

W h e r e G r o u p GmbH & Co. KG

Siemensstraße 8
53121 Bonn
Germany

Christoph Baudson
Anwendungsentwickler

Fon: +49 (0)228 / 90 90 38 - 15
Fax: +49 (0)228 / 90 90 38 - 11
[email protected]
www.wheregroup.com
Amtsgericht Bonn, HRA 6788
_______________________________________

Komplementärin:
WhereGroup Verwaltungs GmbH
vertreten durch:
Olaf Knopp, Peter Stamm
_______________________________________

_______________________________________________
Mapbender_dev mailing list
[email protected]
http://lists.osgeo.org/mailman/listinfo/mapbender_dev

Reply via email to