Jump to content

Does heliohost automatically sanitize data inserted to the (MySQL) databases?


Recommended Posts

Posted

 

I do it manually in my code and now all my messages have slashes in.

That's a handy security feature but i like to do it manually. Is it possible to turn it off or do i have to change all my code to adapt to it?

I wanted my system to be usable on any server so i'd rather not change too much code.

 

Thanks again :)

Posted

AS far as I know there's nothing out of the ordinary here. However, I did experience something similar a few weeks ago, but I discovered a small error when handling $_POST/$_GET variables and fixed the problem. Could this be the case with your code?

 

Posted

I can't imagine why this would be happening. Maybe there is an error in your code.

Posted

I'm assuming your account is on Johnny? Johnny has Magic Quotes turned on and it should be off:

 

magic_quotes_gpc = On

 

I wanted my system to be usable on any server so i'd rather not change too much code.

 

Then you would always add stripslashes() to compensate for a server who had it on or off.

 

$text = stripslashes($_POST[text]);

 

But you don't have to do that as soon as xaav turns it off. :)

 

 

 

 

Posted

magic_quotes_gpc has now been disabled on Johnny. ;)

Even though I have no idea what it means.... but they have.

Posted

Wow, I can't believe PHP still keeps magic quotes on by default.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...