PHP and MySQL for Dynamic Web Sites: Visual QuickPro Guide

Managing Magic Quotes

Built into PHP is a handy feature referred to as Magic Quotes. Magic Quotes—when enabled—will automatically escape single and double quotation marks in the values of retrieved variables. For example, if I entered into a form some text that included an apostrophe (Figure 2.7), the resulting page would look strange (Figure 2.8).

Figure 2.7. Quotation marks entered into form values can be disruptive in your Web applications (see Figure 2.8).

Figure 2.8. The apostrophe entered in the form was escaped automatically by PHP, generating ugly results.

In PHP there are two main types of Magic Quotes: magic_quotes_gpc, which ...