Do magic quotes add slashes only to user input or do they also add slashes to anything that is being inserted into a database query, as well?
For instance, if I serialize an array (thus causing quotes to be in the variable) and then try to insert it into a database query, will the quotes automatically be escaped or will I have to manually addslashes to the serialized array variable?