How does magic quotes handle unmasking of character strings in the database when using addslashes()?

Magic quotes automatically adds slashes to incoming data, which can lead to double escaping when using functions like addslashes(). To handle unmasking of character strings in the database, you can check if magic quotes are enabled and remove the extra slashes before using addslashes(). This can be done by using the stripslashes() function on the input data if magic quotes are enabled. 

if(get_magic_quotes_gpc()) {
    $input_data = array_map('stripslashes', $_POST);
} else {
    $input_data = $_POST;
}

$escaped_data = array_map('addslashes', $input_data);

// Use $escaped_data in your database queries

Keywords

magic quotes addslashes() character strings database unmasking

Related Questions