Re: [phplib] whos escaping the data From: Mike Green (Mike.Green <email protected>)
Date: 10/12/00

"Nebbe, Joelle" wrote:

> > Turn off magic_quotes (either locally or in php.ini).
> >
> > (It's a php thing, not phplib).
>
> Well it is a phplib issue, though. The installation instructions mention:
> "check that track_vars are enabled and that you have enabled
> magic_quotes_gpc"
>
> Now magic_quotes_gpc does that escaping above, but it seems that it
> is needed by phplib. I have wondered about that because magic_quotes_gpc
> is an annoyance to me, it forces me to run everything through a string
> replace function to change \' to '' to build my SQL queries. Now on the
> php only front i could switch those magic quotes off and turn the
> sybase magic quotes on, but I can't cause the phplib documentation
> says it needs that.
>
> What's the truth on the matter?

My understanding is that if one has magic_quotes_gpc on and
magic_quotes_sybase on, then the former uses the convention of the latter.
I.e. if magic_quotes_sybase is on magic_quotes_gpc uses a quote instead of a
backslash to escape a quote . And that's how it at least seems to be working
for me on one site. Am I right or wrong about this?

Cheers!

Mike Green

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>