WP Text Ads Blog

I just updated my Sticky Post and Post Footer plugins. A few people had told me that quotes in their text were backslashed.

That struck me as odd since I had done a get_magic_quotes_gpc() and stripslash() of all $_GET and $_POST variables.

What puzzled me even more was that their PHP magic_quotes_gpc option was turned off, but $_GET and $_POST variables containing quotes were backslashed.

After a little searching, I found the problem. It turnes out that the folks from WordPress had actually made it compulsory to backslash all GPC variables if it contains quotes.

You can find this block of code in the wp-settings.php file.


// If already slashed, strip.
if ( get_magic_quotes_gpc() ) {
$_GET = stripslashes_deep($_GET );
$_POST = stripslashes_deep($_POST );
$_COOKIE = stripslashes_deep($_COOKIE);
}


// Escape with wpdb.
$_GET = add_magic_quotes($_GET );
$_POST = add_magic_quotes($_POST );
$_COOKIE = add_magic_quotes($_COOKIE);
$_SERVER = add_magic_quotes($_SERVER);


Perhaps this was documented somewhere, but I missed it completely.

So in future, just stripslash() all your GPC variables.

Like this post? Buy an ad and drive visitors to your site

About the author

I'm Alex Choo and I live in sunny Singapore. I'm also the developer of WP Text Ads, a WordPress plugin that lets bloggers sell ads directly to advertisers so that they pay 0% in commissions and earn 100% in profits.

Feel free to drop me a note anytime you wish. You should also subscribe to the low volume email announcement list for WP Text Ads below.