Automatic $_POST Variable Escaping

[firepages]

I love PHP because its always simpler than you might expect ...

PHP Code:

<?php
if(!function_exists('glob')){
    function glob($pattern){
       //write your own glob routine here//
    }
}
?>

does not cause the errors you may at first expect!

the recursive cleaner I use... (GPC_ON is set in config if the server has magic_quotes runtime or GPC turned on)

PHP Code:

<?php
function clean(&$arr){
    foreach($arr as $k=>$v){
        if(!is_array($v)){
                        if(defined('GPC_ON')){
                            $arr[$k]=stripslashes($v);
                         }
            $arr[$k]=mysql_real_escape_string($v);
        }else{
            clean($arr[$k]);
        }
    }
}
clean($_POST);
?>

[Velox Letum]

Originally Posted by firepages

the recursive cleaner I use... (GPC_ON is set in config if the server has magic_quotes runtime or GPC turned on)

This a nice, simple function. I like it...much more simple than my wrapper. I never knew there was a constant I could use to detect runtime or gpc either.

[firepages]

Originally Posted by Velox Letum

I never knew there was a constant I could use to detect runtime or gpc either.

sorry I was not clear AFAIK there isn't , its one I set myself in a global config file with calls to get_magic_quotes_runtime() and get_magic_quotes_gpc()

[Velox Letum]

Originally Posted by firepages

sorry I was not clear AFAIK there isn't , its one I set myself in a global config file with calls to get_magic_quotes_runtime() and get_magic_quotes_gpc()

Ahh okay. Smart, that. =)