Forums

This topic is locked

Security Issue With Magic Quotes

Posted 01 Sep 2003 08:51:06
1
has voted
01 Sep 2003 08:51:06 Andrew Highfill posted:
Is there any issue with my extension, Pure PHP Upload, since it is dependant on the DW Insert behavior?

I received this vulnerability notice
www.macromedia.com/support/dreamweaver/ts/documents/security_update_0803.htm
and now I am patching my extensions. If magic quotes are On there seems to be no problem. My host has them turned off. I hope I don't have to go through each page that uses a MQgpc function and change them. WHAT A PAIN! Anyone know what to modify if thats what it takes?

Seems like every time I get one hole patched two more are discovered. I'm no big fan of magic quotes gpc, especially since you can add slashes though a simple function. Magic my butt. Its an illusion!


Amended Post------
I came across this in the forum from Tim Green (mmmm..vegies)

<?php
ini_set("magic_quotes_gpc",1);
?>

and to turn it off use :-
<?php
ini_set("magic_quotes_gpc",0);
?>

and wonder if turning the int_set on and off on my login, insert and update pages would do the trick. Think?

Edited by - Owork on 01 Sep 2003 09:00:44

Reply to this topic