[PHP-DEV] magic_quotes on the environment?

[Shane Caraveo]

Even though magic_quotes_gpc is documented to addslashes to 
get/post/cookie, it also does it to the environment.  This probably 
doesn't effect linux as much as windows, where all paths get escaped if 
magic_quotes_gpc is on.

I find this rather anoying since I am trying to build environments for 
process execution (executing php again) and nothing was working due to 
magic_quotes_gpc (ie. I was not escaping env vars I was creating, then 
php would unescape the data prior to executing).

I'm not convinced that escaping environment data is the correct thing to 
do in the first place, and I would like to change php to not escape env 
vars if magic_quotes_gpc is on.  Any opinions on this?

Shane

--
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, visit: http://www.php.net/unsub.php