 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 |
magic_quotes |
 |
 Posted: Mon Jul 26, 2004 10:17 pm |
 |
|
| icenix |
| Advanced user |
 |
|
| Joined: May 13, 2004 |
| Posts: 106 |
| Location: Australia |
|
|
 |
|
 |
|
lol "magic_quotes"
please explain lol
cheers  |
|
|
|
|
| Posted: Fri Jul 30, 2004 11:23 pm |
|
|
| hackr3d |
| Regular user |
|
|
| Joined: Jun 13, 2004 |
| Posts: 10 |
|
|
|
|
|
|
|
//config.php
...
// We don't like magic_quotes 
no_magic_quotes();
...
//end |
|
_________________
venezuela hacking...!! |
|
|
|
|
???? |
|
| Posted: Sun Aug 01, 2004 8:34 am |
|
|
| icenix |
| Advanced user |
|
|
| Joined: May 13, 2004 |
| Posts: 106 |
| Location: Australia |
|
|
|
|
|
|
its uses?
what its used for?
*mighty confused*
 |
|
|
|
|
|
|
|
|
| Posted: Sun Aug 01, 2004 11:28 pm |
|
|
| madman |
| Active user |
 |
|
| Joined: May 24, 2004 |
| Posts: 46 |
|
|
|
|
|
|
|
Magic quotes: Sim salabim or abracadabra... 
Hehehe... Just kidding, icenix. 
"magic quotes" is a flag or trigger to treat external data (requests, file contents, database fetching) by automatically escaping special characters (mostly single- or double-quotes) if assigned to string variable.
In PHP, magic quotes is adjusted from PHP configuration file (php.ini). In scripting code, PHP provides three "magic quotes" functions, get_magic_quotes_gpc, get_magic_quotes_runtime, and set_magic_quotes_runtime.
get_magic_quotes_gpc() function will return setting in php.ini. This is used to control automatic character's escaping from requests. This code will show you how the function works:
| Code: | if (!get_magic_quotes_gpc())
{
reset($_REQUEST);
foreach($_REQUEST as $key => $value) $_REQUEST[$key] = addslashes($value);
} |
There is no set_magic_quotes_gpc() because this setting is read only, even you try to change it using ini_set() function. ( simple reason because this has no effects since request variables already loaded before the script begin. Make sense to me )
get_magic_quotes_runtime and set_magic_quotes_runtime used to control automatic character's escaping from database or loading file data. By default (original php config) this function is off. You can force the setting by calling set_magic_quote_runtime() anywhere and anytime within the script. It advisable to leave this setting off, or put a code that always executed in the beginning from any of script files:
| Code: | | set_magic_quotes_runtime(0); |
This is ensure binary data also retrieved properly. Binary data including but not limited to image files, blob in database, etc.
This is an example of evaluating retrieved data regarding to magic quotes runtime status:
| Code: | $file_data = getfiledata('image.gif');
$db_blob = getblob_from_database('myblob');
if (get_magic_quotes_runtime())
{
$file_data = stripslashes($file_data);
$db_blob = stripslashes($db_blob);
} |
I hope this "short tutorial" is useful for everyone. |
|
_________________
ch88rs,
madman |
|
|
|
|
|
thnx |
|
| Posted: Wed Aug 04, 2004 10:16 pm |
|
|
| icenix |
| Advanced user |
|
|
| Joined: May 13, 2004 |
| Posts: 106 |
| Location: Australia |
|
|
|
|
|
|
| thankyou very much madman |
|
|
|
|
| Posted: Thu Aug 05, 2004 4:09 am |
|
|
| LINUX |
| Moderator |
|
|
| Joined: May 24, 2004 |
| Posts: 404 |
| Location: Caiman |
|
|
|
|
|
|
good info madman  |
|
|
|
|
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 882
Members: 0
Total: 882
