session variable addslashed ?

luro

Hello,

I'mm using php4 session in a common way.
When I put a string objet, it seems it is "addslashes".
I'm having my string session variables addslashed, i guess it is done when the string is serialized before registered in session.

Am i wrong ?

If I want to reuse the string, is a single "stripslashes()" enough to be sure that all characters will be correctly recover ?

Thanks 4 your help

Weedpacket

If you use addslashes() once, you use stripslashes() once. If you use one twice, you use the other twice. But do you need to use addslashes() at all?

luro

I'm not using addslashes() at all, but when I save some string variablein session and retrieve them in another page, typically
- "to'to"
will become
- "to\'to"

that's why I thought that an "addslashes()" was embedded in the serialisation that occurs when you register a variable in a session.
- session_register("session_message");

To retrieve my initial data i need to use stripslash().
Untill now it works with my datatest, but I'm not sure it is the good was

Weedpacket

Originally posted by luro
I'm not using addslashes() at all, but when I save some string variablein session and retrieve them in another page, typically
- "to'to"
will become
- "to\'to"

that's why I thought that an "addslashes()" was embedded in the serialisation that occurs when you register a variable in a session.
- session_register("session_message");

To retrieve my initial data i need to use stripslash().
Untill now it works with my datatest, but I'm not sure it is the good was

Okay; yeah. That's what stripslashes() was designed for.

If it's too much hassle to use stripslashes() all the time, see if turning magic_quotes_gpc off in your php.ini will help or if it will instead just make something else break.

If you can't change php.ini for some reason, use ini_set('magic_quotes_gpc',0); in your script to turn it off on a page-by-page basis.

luro

thanks !

by the way, do you have an idea of the size limit of the data I store in the session ?

Weedpacket

Originally posted by luro
thanks !

by the way, do you have an idea of the size limit of the data I store in the session ?

I don't think there is one (beyond your server's ability to throw more and more disk space at the problem). How much are you trying to store?

One thing to keep in mind however is that as the session data file gets larger and larger, script performance will start to be affected.