I have a development machine that is local and a server out on the net. Weird thing is that when I use stripslashes on my development machine, all slashes are removed and when I upload the same code to the net server, I see the escape character even though I am using stripslashes. Anyone have any ideas?
+1
A:
This could be Magic Quotes. Try to disable them or remove them before processing the data.
Gumbo
2009-08-17 09:26:29
I just checked the ini file on the server and magic_quotes is set to ON. Shouldn't this be disabled for security reasons? What is the norm?
2009-08-17 09:29:47
@Jim: They should be disabled if possible. But applications need to be aware that they might be enabled/disabled and should be able to remove them. Or at least they shouldn’t rely on that they are always enabled/disabled.
Gumbo
2009-08-17 09:39:36