A hack to get around magic_quotes_gpc being turned off

This commit is contained in:
moodler
2003-07-28 16:37:12 +00:00
parent f406e6785e
commit aa6af0f833
+10 -23
View File
@@ -117,30 +117,17 @@
$CFG->footer = "$CFG->dirroot/theme/$CFG->theme/footer.html";
/// A hack to get around magic_quotes_gpc being turned off
if (!ini_get_bool("magic_quotes_gpc") ) { // Hopefully it's on, though.
foreach ($_GET as $key => $var) {
$_GET[$key] = addslashes($var);
}
foreach ($_POST as $key => $var) {
$_POST[$key] = addslashes($var);
}
}
/// Reference code to remove magic quotes from everything ... just in case.
/// If you have problems with slashes everywhere then you might want to
/// uncomment this code. It will not be necessary on 99.9% of PHP servers.
/// Got this from http://www.php.net/manual/en/configuration.php
// if (ini_get_bool("magic_quotes_gpc") ) {
// foreach ($GLOBALS["HTTP_".$GLOBALS["REQUEST_METHOD"]."_VARS"] as $key => $value) {
// if (!is_array($value)) { // Simple value
// $newval = stripslashes($value);
// $GLOBALS["HTTP_".$GLOBALS["REQUEST_METHOD"]."_VARS"][$key] = $newval;
// if (ini_get_bool("register_globals")) {
// $GLOBALS[$key] = $newval;
// }
// } else { // Array
// foreach ($value as $k => $v) {
// $newval = stripslashes($v);
// $GLOBALS["HTTP_".$GLOBALS["REQUEST_METHOD"]."_VARS"][$key][$k] = $newval;
// if (ini_get_bool("register_globals")) {
// $GLOBALS[$key][$k] = $newval;
// }
// }
// }
// }
// }
/// The following is a hack to get around the problem of PHP installations
/// that have "register_globals" turned off (default since PHP 4.1.0).