escapeshellcmd, escapeshellargs, etc.

[Anon]

how useful are these if magicquotes is enabled?

and is there any real point in using them unless i'm passing the string to exec(), system(), mail(), or something like that?

as a relative newbie i'm concerned about making things as secure as i can, but it seems rather pointless if i've got to run stripslashes twice or run an S&R for \\'

i've read through the manual which doesn't say much. the wrox book i've got here goes into it a little bit with one particular scenario, but is this something i should really be implimenting left and right?

many thanks for any insight.

-a

[vsego]

These are used with system(), exec() and passthru() (not even mail()). Not much point in using them with other functions.

They are used so that malicious data wouldn't be passed to shell (where you're not using stripSlashes).