PHP parser will automatically add the escape character ""
to the data coming from post, get, cookie to ensure that these data will not Cause fatal errors in programs, especially database statements, due to contamination caused by special characters (characters considered to be PHP characters). After insertion, the original data before escaping is displayed in the database, so there is no need to escape it when taken out.
In the case of magic_quotes_gpc=On, if the input data contains characters such as
single quotation mark ('), double quotation mark ("), backslash () and NUL (NULL character), backslashes will be added. These conversions Definition is required. If this option is off, then we must call the addslashes function to add escaping to the string.
It is precisely because of the contradiction that this option must be On, but it also allows users to configure it, this option has been deleted in PHP6, and all programming needs to be performed under magic_quotes_gpc=Off. In such an environment, if the user's data is not escaped, the consequences are not just program errors. The same will cause the risk of database injection attacks. So from now on, everyone should no longer rely on this setting being On, lest one day your server needs to be updated to PHP6 and your program will not work properly. 🎜
🎜So it can be seen that the function of this get_magic_quotes_gpc() function is to get the value of the environment variable magic_quotes_gpc. Since the magic_quotes_gpc option has been deleted in PHP6, I think this function no longer exists in PHP6🎜
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
php escape gpc
In PHP, the
. The function of this function is to get the value of theget_magic_quotes_gpc()function is aget_magic_quotes_gpc()函数是内置的函数，这个函数的作用就是得到php.ini设置中magic_quotes_gpcbuilt-in functionoption in the
Then let’s talk about it firstphp.inisetting.magic_quotes_gpcOptions:
to the data coming frommagic_quotes_gpc=OnPHP解析器就会自动为
post、get、cookieIfmagic_quotes_gpc=OnPHP parser will automatically add the escape character ""
post, get, cookieto ensure that these data will not Cause fatal errors in programs, especially database statements, due to contamination caused by special characters (characters considered to be PHP characters). After insertion, the original data before escaping is displayed in the database, so there is no need to escape it when taken out.In the case of magic_quotes_gpc=On, if the input data contains characters such as
single quotation mark ('), double quotation mark ("), backslash () and NUL (NULL character), backslashes will be added. These conversions Definition is required. If this option is off, then we must call the addslashes function to add escaping to the string.
It is precisely because of the contradiction that this option must be On, but it also allows users to configure it, this option has been deleted in PHP6, and all programming needs to be performed under magic_quotes_gpc=Off. In such an environment, if the user's data is not escaped, the consequences are not just program errors. The same will cause the risk of database injection attacks. So from now on, everyone should no longer rely on this setting being On, lest one day your server needs to be updated to PHP6 and your program will not work properly. 🎜 🎜So it can be seen that the function of this get_magic_quotes_gpc() function is to get the value of the environment variable magic_quotes_gpc. Since the magic_quotes_gpc option has been deleted in PHP6, I think this function no longer exists in PHP6🎜