[RESOLVED] ini help!

Masna

I'm working with ini_set. There's an option, magic_quotes_gpc, that, when on, ruins the software project I'm working on. But, I'm having trouble turning it off. I tried this:

ini_set("magic_quotes_gpc", "0");

But, that fails. Anyone?

Masna

Anyone?

Masna

Come on...

thorpe

ini_set("magic_quotes_gpc", 0);

Masna

thorpe wrote:

ini_set("magic_quotes_gpc", 0);

That doesn't work. magic_quotes_gpc can't be set during runtime, because the backslashes have already been added by time it's set.

bradgrafelman

So create a .htaccess file in the directory that looks like this:

php_flag magic_quotes_gpc Off

Masna

Are you sure that will work?

Masna

Masna wrote:
Are you sure that will work?

I tried that, and this is what shows up all over the site now:

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, support@supportwebsite.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

Apache/1.3.33 Server at sherbsblog.com Port 80

bradgrafelman

Works fine for me. Might be that your webhost has installed PHP as a CGI binary as opposed to the (recommended) Apache module. You could always e-mail your host and explain what you're doing. Maybe they have a good reason? shrug

Either way, it looks like you're out of options for changing this setting before runtime, so it's back to a coding work-around, which I'll repost here:

jsim wrote:

If you don't need slashes in $POST and $GET there is another solution without changing ini settings:

<?php

function StripMagicQuotes($arr) {
  reset($arr);
  while( list($key,$value) = each($arr) ) {
    if( is_array($value) ) {
      $arr[$key] = StripMagicQuotes($value);
    } else {
      if( is_string($value) )
        $arr[$key] = stripslashes($value);
    }
  }
  return $arr;
}

if( get_magic_quotes_gpc() > 0 ) {
  $_POST = StripMagicQuotes($_POST);
  $_GET = StripMagicQuotes($_GET);
}

?>

Masna

bradgrafelman wrote:
Works fine for me. Might be that your webhost has installed PHP as a CGI binary as opposed to the (recommended) Apache module. You could always e-mail your host and explain what you're doing. Maybe they have a good reason? shrug

Either way, it looks like you're out of options for changing this setting before runtime, so it's back to a coding work-around, which I'll repost here:

Well, it's much more complicated than that :-/. What I'm working on is a web-based MySQL database management webscript (mysqlquickadmin.com). So I now have to go through the entire site, every single page, and do a check if magic_quotes_gpc is on, and if so, stripslashes. Anyhow... is there any possible way to use a custom created function like a regular one, in this sense:

function stringIt($var){
$var = htmlspecialchars($var);
if(ini_get("magic_quotes_gpc") == "1"){
$var = stripslashes($var);
}

return $var;
}

// later on...

$var = "hello".stringIt($whatever)."hey";

Is using a custom function in that sense possible? Apparently not, but maybe there's something I can add in the function? Thanks for all your help.

bradgrafelman

Apparently not, but maybe there's something I can add in the function?

Why not? What's wrong with that? Looks fine to me, other than the fact that "1" shouldn't be in quotes in the if() statement... (though it would technically still work).

Like I said earlier, it couldn't hurt to e-mail them and tell them that you would like to turn this directive off.

Masna

Really, that should work? Because that's exactly what I tried... Didn't work :-/

And the problem with emailing the host... This is downloadable, so I can't email everyone's host :-X.

bradgrafelman

Worked fine for me on my server, so... I'm puzzled as to why it's not working for you.

Masna

Apparently, the problem was/is my function...

What's wrong with this???

function stringIt($var){
	$new_var = htmlspecialchars($var);
	$new_var = (ini_get("magic_quotes_gpc") == 1)?stripslashes($new_var):$new_var;
	return $new_var;
}

Looks fine to me 🙁

EDIT: Never mind, I fixed it!

So... If I use the function like this...

$var = "hey".stringIt($var);

... Whatever is told to be returned in the stringIt function will be returned on that var (along with "hey" in front)?

Masna

This just in! stripslashes doesn't affect magic_quotes_gpc :-/

Never mind... It's a problem with my function. Anyone?

EDIT: Everything is fixed, thank you everyone for your help!