magic_quotes on the environment?
[email protected] (Shane Caraveo)
| Newsgroups | php.dev |
|---|---|
| Message-ID | <[email protected]> |
Even though magic_quotes_gpc is documented to addslashes to get/post/cookie, it also does it to the environment. This probably doesn't effect linux as much as windows, where all paths get escaped if magic_quotes_gpc is on. I find this rather anoying since I am trying to build environments for process execution (executing php again) and nothing was working due to magic_quotes_gpc (ie. I was not escaping env vars I was creating, then php would unescape the data prior to executing). I'm not convinced that escaping environment data is the correct thing to do in the first place, and I would like to change php to not escape env vars if magic_quotes_gpc is on. Any opinions on this? Shane