What are the pros and cons for magic_quotes_gpc

[williamc]

My first impulse was to turn it off. But maybe I'm wrong. Or is it one
of those 6 of one half a dozen of the other things?

From what I'm seeing on a search it might improve performance slightly
but with some s/w there are security issues... (We have register_global s
turned off).

General working env. is mySql, but might switch to PostGres in the
future. Right now I'm using Perl::DBI to access the database, but that's
because I don't know PHP data access methods yet and have some already
written stuff to work with.

thx,

--williamc

[Jochen Daum]

Re: What are the pros and cons for magic_quotes_gp c

Hi William!

On Mon, 15 Sep 2003 20:34:31 GMT, williamc
<temp4_NO_SPAM_ @williamc.com> wrote:
[color=blue]
>My first impulse was to turn it off. But maybe I'm wrong. Or is it one
>of those 6 of one half a dozen of the other things?
>
>From what I'm seeing on a search it might improve performance slightly
>but with some s/w there are security issues... (We have register_global s
>turned off).
>
>General working env. is mySql, but might switch to PostGres in the
>future. Right now I'm using Perl::DBI to access the database, but that's
>because I don't know PHP data access methods yet and have some already
>written stuff to work with.[/color]

It does something for all scripts which is not the right thing for
some scripts, namely the scripts which deal with MSSQL, Informix and
Sybase databases. Thats why I turned it off.

But its really a protability issue, so the right thing is to cater for
both turned on and off.

Jochen
--
Jochen Daum - CANS Ltd.
PHP DB Edit Toolkit -- PHP scripts for building
database editing interfaces.

http://sourceforge.net/projects/phpdbedittk/

[williamc]

Re: What are the pros and cons for magic_quotes_gp c

thx.

--wmc

Jochen Daum wrote:
[color=blue]
> Hi William![/color]
[color=blue]
> It does something for all scripts which is not the right thing for
> some scripts, namely the scripts which deal with MSSQL, Informix and
> Sybase databases. Thats why I turned it off.
>
> But its really a protability issue, so the right thing is to cater for
> both turned on and off.
>
> Jochen
> --
> Jochen Daum - CANS Ltd.
> PHP DB Edit Toolkit -- PHP scripts for building
> database editing interfaces.
> http://sourceforge.net/projects/phpdbedittk/[/color]

[Lothar Scholz]

Re: What are the pros and cons for magic_quotes_gp c

Jochen Daum <jochen.daum@ca ns.co.nz> wrote in message news:<i9ecmvsn6 k2bukhfdi4dt8mb nbidnue2rb@4ax. com>...[color=blue]
>
> It does something for all scripts which is not the right thing for
> some scripts, namely the scripts which deal with MSSQL, Informix and
> Sybase databases. Thats why I turned it off.
>
> But its really a protability issue, so the right thing is to cater for
> both turned on and off.
>[/color]

And it does the wrong thing if you don't want to put the data into a database.
Okay you can get the raw data with another call but then it's becoming quite ugly.