Which one is better to use default magic quotes or custom addlash / stripslash in PHP?

Question

which one is better to use default magic quotes or custom addlash / stripslash in PHP? I want to use the best. please help me.

Answer 1

neither.

magic quotes are the root of all evil! (in my eyes, even worse than premature xD optimization)

and why do you want to create a user-defined ( add| strip) slash function when you have your own php tags?

If you want to avoid the date for a database, use the functions that are specific to the database (for example mysqli_real_escape_string)

. ( ):

• / , htmlspecialchars

• URL-, urlencode

. . (. http://xkcd.com/163/)

Answer 2

! PHP 5, PHP 6. , ! , . , ( Python).

Answer 3

, . , - . - , . .

, HTML, htmlspecialchars() . SQL , , , mysql_real_escape_string(). XML, XML- PHP; .

. , .

Answer 4

. script :

set_magic_quotes_runtime(0);

, PHP, PHP, , , .

, - , , PHP PHP, .

, .