oic
I validate all REQUEST and POST data very carefully, so I don't think I'm in any danger of injection.
Is the magic quotes thing the same as magic_quotes_gpc? I already use this code when I addslashes to POST data:
PHP Code:
// IF M_Q_GPC IS NOT ENABLED, THEN PARSE FOR INJECTION
// M_Q_GPC AUTOMATICALLY PARSES ALL POSTED DATA IF ENABLED
if (!get_magic_quotes_gpc())
{
$_POST['var'] = addslashes($_POST['var']);
}
So I think I have that covered.