Removing Register Globals and Magic Quotes

Created by ltp, last update on 26/02/2008 17:29

If you are in the situation where you can not control is register globals are on or if magic quotes are on you need an easy way to remove them. Luckily with a single include file you can remove these items. Whether you are transitioning away from them or are on a host where you can not turn them off this will help you to ensure that the variables are cleaned out.

if (ini_get('register_globals')) {
	$rg = array_keys($_REQUEST);
	foreach($rg as $v)
	{
		if ($_REQUEST[$v] === $$v)
		{
			unset($$v);
		}
	}
	unset($rg);
}
 
if (get_magic_quotes_gpc()) {
	$in = array(&$_GET, &$_POST, &$_COOKIE);
	while (list($k,$v) = each($in))
	{
		foreach ($v as $key => $val)
		{
			if (!is_array($val))
			{
				$in[$k][$key] = stripslashes($val);
				continue;
			}
			$in[] =& $in[$k][$key];
		}
	}
	unset($in);
}

Dependencies

No special requirements are needed by this snippet

By logging in you will be able to:

• Recommand this page to someone else
• Monitor changes on this item
• Rate this item
• Post comments
• Download this item