[Mapbender-dev] magic quotes

[Christoph Baudson]

Hello,

Mapbender is not very decisive whether to use stripslashes on request 
parameters or not. We seem to indecisive if we assume magic_quotes_gpc 
to be on or  off (it is on by default).

I suggest we add something like this to globalSettings.php

if (get_magic_quotes_gpc() === 1) {
    array_walk($_POST, 'stripslashes');
    array_walk($_GET, 'stripslashes');
}

By this, all input would be properly prepared, and no stripslashing 
would have to occur.

What do you think?

Christoph

-- 

----------------------------------

 FOSSGIS Konferenz 2009
 17.-19. März 2009 in Hannover
 http://www.fossgis.de/konferenz

---------------------------------- 

_______________________________________

W h e r e G r o u p GmbH & Co. KG

Siemensstraße 8
53121 Bonn
Germany

Christoph Baudson
Anwendungsentwickler

Fon: +49 (0)228 / 90 90 38 - 15
Fax: +49 (0)228 / 90 90 38 - 11
christoph.baudson at wheregroup.com
www.wheregroup.com
Amtsgericht Bonn, HRA 6788
_______________________________________

Komplementärin:
WhereGroup Verwaltungs GmbH
vertreten durch:
Olaf Knopp, Peter Stamm
_______________________________________