<quote who="Matthew Palmer">

> The problem is that PHP has a few rather annoying nanny features in it.  I
> presume that the information you're writing to the database is coming from
> an external source, such as $_POST or $_GET (or their non-superglobal
> equivalents).  If so, you're falling foul of the "magic_quotes_gpc"
> setting

> Alternately you could stop running mysql_quote() (or equivalent) before
> you
> store in the database, but then when magic_quotes_gpc gets turned off (or
> they finally see the register_globals light and get the hell rid of it
> entirely) you'll be leaving yourself open to SQL injection attacks.
>
> Make sense?  If not, let me know and I'll try explaining it better when
> it's
> *not* midnight...

Matt,

yes, it does, thanks for detailed info,

-- 
Voytek
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to