How does enabling or disabling "magic_quotes_gpc" impact PHP code execution?

Enabling "magic_quotes_gpc" in PHP automatically escapes incoming data from forms, which can lead to double escaping and security vulnerabilities. Disabling it allows developers to handle input data properly, such as using prepared statements for database queries. 

// Disable magic_quotes_gpc
if (get_magic_quotes_gpc()) {
    function stripslashes_gpc(&$value) {
        $value = stripslashes($value);
    }
    
    array_walk_recursive($_GET, 'stripslashes_gpc');
    array_walk_recursive($_POST, 'stripslashes_gpc');
    array_walk_recursive($_COOKIE, 'stripslashes_gpc');
    array_walk_recursive($_REQUEST, 'stripslashes_gpc');
}

Keywords

magic_quotes_gpc PHP code execution security input validation

Related Questions