How can the removal of Magic Quotes in PHP version 5.4.0 affect the functionality of existing scripts?

The removal of Magic Quotes in PHP version 5.4.0 can affect the functionality of existing scripts that rely on automatically escaping incoming data. To fix this issue, you can manually escape incoming data using functions like addslashes() or mysqli_real_escape_string() before using it in SQL queries. 

// Fix for Magic Quotes removal in PHP 5.4.0
if (get_magic_quotes_gpc()) {
    function stripslashes_deep($value) {
        $value = is_array($value) ? array_map('stripslashes_deep', $value) : stripslashes($value);
        return $value;
    }

    $_POST = array_map('stripslashes_deep', $_POST);
    $_GET = array_map('stripslashes_deep', $_GET);
    $_COOKIE = array_map('stripslashes_deep', $_COOKIE);
    $_REQUEST = array_map('stripslashes_deep', $_REQUEST);
}

Keywords

Magic Quotes PHP version 5.4.0 backward compatibility addslashes() stripslashes()

Related Questions