2009/10/14
Overcoming magic_quotes_gpc
PHP offers a feature called magic_quotes_gpc. What this does is it takes all GET, POST, and COOKIE variables and applies a partial escaping to them. Unfortunately, the escaping that it does is not good enough to pass the result directly to MySQL. Further, when you run mysql_real_escape_string on the values, it will redo the escaping [...]