ID:               22424
 User updated by:  oregon at pobox dot com
 Reported By:      oregon at pobox dot com
-Status:           Open
+Status:           Bogus
 Bug Type:         Variables related
 Operating System: Linux 2.4.9-31
 PHP Version:      4.2.3
 New Comment:

Nevermind, it actually does work apparently.


Previous Comments:
------------------------------------------------------------------------

[2003-02-25 19:26:33] oregon at pobox dot com

The magic_quotes_gpc option correctly escapes single quotes, but it
ignores the single quote in GET data when the single quote is
URL-encoded (as %27).  This causes database errors on submitted data
what was supposed to be handled by magic_quotes_gpc.  

Example: calling a script "view.php" with city set to "Martha's
Vinyard" URL-encoded will generate a DB error when the city is passed
to a database query...

http://mywebsite.com/view.php?city=Martha%27s+Vinyard

------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=22424&edit=1

Reply via email to