my php configuration has magic_quotes_runtime set to off so, when i pull a string out of a mysql db, how come it shows up just fine without running it through addslashes()? when i run it through addslashes(), it adds slashes where its supposed to.... but when i don't use it it shows up just fine i am curious as to why i dont have to run addslashes() to make my text show up right can anyone answer my question?

Reply

Magic_quotes function adds slashes to strings going to a Database. If it is set 'off', then the Database does not contain the escapes "\", so they won't be there when you return the data.
Magic_quotes is deprecated in php6.

http://ca.php.net/manual/en/ref.info.php#i...-quotes-runtime

Reply

Whenever you pull something out of your database that has slashes added to it, always strip the slashes using the stripslashes() function. It is better for you to add slashes to any input that's going into the database for security reasons. But it's better to use the mysql_real_escape_string() function than addslashes().

Reply