Re: 8.1.4: Who says "PHP deprecated addslashes since 4.0"?
- From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
- To: ljb <ljb220(at)mindspring(dot)com>
- Cc: pgsql-general(at)postgresql(dot)org
- Subject: Re: 8.1.4: Who says "PHP deprecated addslashes since 4.0"?
- Date: Wed, 24 May 2006 23:05:31 -0400
- Message-id: <7747(dot)1148526331(at)sss(dot)pgh(dot)pa(dot)us>
ljb <ljb220(at)mindspring(dot)com> writes:
> | addslashes() or magic_quotes. We note that these tools have been deprecated
> | by the PHP group since version 4.0.
> Can anyone provide a source for the statement?
I'm not going to put words in Josh's mouth about where he got that from,
but anyone who reads all of the comments at
http://us3.php.net/manual/en/function.addslashes.php
ought to come away suitably unimpressed with the security of that
function.
regards, tom lane
Home |
Main Index |
Thread Index