Skip site navigation (1) Skip section navigation (2)

Peripheral Links

Header And Logo

PostgreSQL
| The world's most advanced open source database.

Site Navigation

Search for
  Advanced Search

Re: 8.1.4: Who says "PHP deprecated addslashes since 4.0"?


  • From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
  • To: ljb <ljb220(at)mindspring(dot)com>
  • Cc: pgsql-general(at)postgresql(dot)org
  • Subject: Re: 8.1.4: Who says "PHP deprecated addslashes since 4.0"?
  • Date: Wed, 24 May 2006 23:05:31 -0400
  • Message-id: <7747(dot)1148526331(at)sss(dot)pgh(dot)pa(dot)us>

ljb <ljb220(at)mindspring(dot)com> writes:
> |  addslashes() or magic_quotes. We note that these tools have been deprecated
> |  by the PHP group since version 4.0.

> Can anyone provide a source for the statement?

I'm not going to put words in Josh's mouth about where he got that from,
but anyone who reads all of the comments at
http://us3.php.net/manual/en/function.addslashes.php
ought to come away suitably unimpressed with the security of that
function.

			regards, tom lane



Home | Main Index | Thread Index

Privacy Policy | PostgreSQL Archives hosted by Command Prompt, Inc. | Designed by tinysofa
Copyright © 1996 – 2008 PostgreSQL Global Development Group