The magic quotes option is designed to safeguard developers against SQL injection attacks. It executes addslashes() on all information received over GET, POST or COOKIE. This protection is not perfect and it's better to validate input from your own scripts. Still, it is recommended to enable magic_quotes_gpc as an extra layer of security.


You can enable magic_quotes_gpc from php.ini or .htaccess.

magic_quotes_gpc = 'on'

php_flag magic_quotes_gpc on

Related Vulnerabilities