Magic quotes is a controversial feature of the PHP scripting language, wherein special characters are prefixed with a backslash before being passed on. It was introduced to help newcomers write functioning SQL commands without requiring manual escaping. It was later described and widely misinterpreted as intended to prevent inexperienced developers from writing code that was vulnerable to SQL injection attacks. This feature was officially deprecated as of PHP 5.3.0 and removed in PHP 5.4, due to security concerns.
No comments:
Post a Comment