Description

The magic quotes option is designed to safeguard developers against SQL injection attacks. It executes addslashes() on all information received over GET, POST or COOKIE. This protection is not perfect and it's better to validate input from your own scripts. Still, it is recommended to enable magic_quotes_gpc as an extra layer of security.

Remediation

You can enable magic_quotes_gpc from php.ini or .htaccess.

php.ini
magic_quotes_gpc = 'on'

.htaccess
php_flag magic_quotes_gpc on

Related Vulnerabilities