PHP6 and magic quotes

July 23, 2008 – 8:36 am

A little advanced warning here, PHP 6 is in development and the developers of PHP have decided to remove magic_quotes().

For those of you who don’t speak fluent PHP, magic_quotes() is a feature built into PHP, designed primarily to protect websites from SQL injection techniques. Unfortunately, lots of developers have used the magic_quotes functionality as their main protection mechanism for their code. This is highly discouraged by the developers of PHP

At this stage, web companies / developers should (must) re-visit any legacy code running on their websites to add additional protection prior to upgrading their servers to PHP6.

We will also be notifying our customers of this important information via email.

Share/Save/Bookmark

Post a Comment