Waraxe IT Security Portal
Login or Register
November 2, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 77
Members: 0
Total: 77
Full disclosure
xlibre Xnest security advisory & bugfix releases
APPLE-SA-10-29-2024-1 Safari 18.1
SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600)
SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333)
APPLE-SA-10-28-2024-8 visionOS 2.1
APPLE-SA-10-28-2024-7 tvOS 18.1
APPLE-SA-10-28-2024-6 watchOS 11.1
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1
Open Redirect / Reflected XSS - booked-schedulerv2.8.5
SEC Consult SA-20241024-0 :: Unauthenticated Path Traversal Vulnerability in Lawo AG - vsm LTC Time Sync (vTimeSync) (CVE-2024-6049)
[RESEARCH] DTLS 'ClientHello' Race Conditions in WebRTCImplementations
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Newbies corner -> magic_quotes
Post new topicReply to topic View previous topic :: View next topic
magic_quotes
PostPosted: Mon Jul 26, 2004 10:17 pm Reply with quote
icenix
Advanced user
Advanced user
Joined: May 13, 2004
Posts: 106
Location: Australia




lol "magic_quotes"

please explain lol
cheers Very Happy

_________________
=[WWW.WARAXE.US]=
-Forum Rules
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
PostPosted: Fri Jul 30, 2004 11:23 pm Reply with quote
hackr3d
Regular user
Regular user
Joined: Jun 13, 2004
Posts: 10




//config.php
...
// We don't like magic_quotes Wink
no_magic_quotes();
...
//end

_________________
venezuela hacking...!!
View user's profile Send private message MSN Messenger
????
PostPosted: Sun Aug 01, 2004 8:34 am Reply with quote
icenix
Advanced user
Advanced user
Joined: May 13, 2004
Posts: 106
Location: Australia




its uses?
what its used for?
*mighty confused*
Question Question Question Question Question Question Question

_________________
=[WWW.WARAXE.US]=
-Forum Rules
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
PostPosted: Sun Aug 01, 2004 11:28 pm Reply with quote
madman
Active user
Active user
Joined: May 24, 2004
Posts: 46




Magic quotes: Sim salabim or abracadabra... Laughing
Hehehe... Just kidding, icenix. Smile

"magic quotes" is a flag or trigger to treat external data (requests, file contents, database fetching) by automatically escaping special characters (mostly single- or double-quotes) if assigned to string variable.

In PHP, magic quotes is adjusted from PHP configuration file (php.ini). In scripting code, PHP provides three "magic quotes" functions, get_magic_quotes_gpc, get_magic_quotes_runtime, and set_magic_quotes_runtime.

get_magic_quotes_gpc() function will return setting in php.ini. This is used to control automatic character's escaping from requests. This code will show you how the function works:
Code:
if (!get_magic_quotes_gpc())
{
reset($_REQUEST);
foreach($_REQUEST as $key => $value) $_REQUEST[$key] = addslashes($value);
}


There is no set_magic_quotes_gpc() because this setting is read only, even you try to change it using ini_set() function. ( simple reason because this has no effects since request variables already loaded before the script begin. Make sense to me Smile )

get_magic_quotes_runtime and set_magic_quotes_runtime used to control automatic character's escaping from database or loading file data. By default (original php config) this function is off. You can force the setting by calling set_magic_quote_runtime() anywhere and anytime within the script. It advisable to leave this setting off, or put a code that always executed in the beginning from any of script files:
Code:
set_magic_quotes_runtime(0);


This is ensure binary data also retrieved properly. Binary data including but not limited to image files, blob in database, etc.

This is an example of evaluating retrieved data regarding to magic quotes runtime status:
Code:
$file_data = getfiledata('image.gif');
$db_blob = getblob_from_database('myblob');
if (get_magic_quotes_runtime())
{
$file_data = stripslashes($file_data);
$db_blob = stripslashes($db_blob);
}


I hope this "short tutorial" is useful for everyone. Smile

_________________
ch88rs,
madman
View user's profile Send private message
thnx
PostPosted: Wed Aug 04, 2004 10:16 pm Reply with quote
icenix
Advanced user
Advanced user
Joined: May 13, 2004
Posts: 106
Location: Australia




thankyou very much madman Very Happy

_________________
=[WWW.WARAXE.US]=
-Forum Rules
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
PostPosted: Thu Aug 05, 2004 4:09 am Reply with quote
LINUX
Moderator
Moderator
Joined: May 24, 2004
Posts: 404
Location: Caiman




good info madman Cool
View user's profile Send private message Visit poster's website
magic_quotes
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.034 Seconds