Re: [PHP] Attack of the ghost double slash??

2002-09-21 Thread Gerard Samuel
Thanks much, that made all the difference in the world. The function would be get_magic_quotes_gpc() Chris Shiflett wrote: Gerard, The most likely reason is a php.ini configuration called magic_quotes. When enabled, PHP will automatically add slashes to single and double quotes, as well

[PHP] Attack of the ghost double slash??

2002-09-20 Thread Gerard Samuel
A few months ago, I wrote a bit of code to stripslash() PATH_TRANSLATED on a w2k box, because, php was reporting it with double slashes like C:\\winnt\\some_dir Today I noticed that the code is broken because PATH_TRANSLATED is now reported with one slash like C:\winnt\some_dir Does anyone

Re: [PHP] Attack of the ghost double slash??

2002-09-20 Thread Chris Shiflett
Gerard, The most likely reason is a php.ini configuration called magic_quotes. When enabled, PHP will automatically add slashes to single and double quotes, as well as slashes themselves (to escape them). This is helpful in some environments to help protect against attacks that can be used to