Add info about addslashes()

2004-01-08 03:10:27 +00:00
parent 1cfed10bb9
commit 9aefce20af
1 changed files with 4 additions and 0 deletions
@@ -38,6 +38,10 @@
    the &quot;lang/en&quot; files and call them using get_string() or print_string().</li>
  <li class="spaced">All help files should be translatable - create new texts 
    in the &quot;en/help&quot; directory and call them using helpbutton().</li>
+  <li class="spaced">Incoming data from the browser (sent via GET or POST) automatically
+    has magic_quotes applied (regardless of the PHP settings) so that you can safely
+    insert it straight into the database.  All other raw data (from files, or from databases)
+    must be escaped with <font color="#339900">addslashes()</font> before inserting it into the database.</li>
 </ol>
 <p>&nbsp;</p>
 <h2>Coding Style</h2>