You should NEVER rely on magic quotes or addslashes for security in an SQL context. You should ALWAYS use proper escape functions, such as mysql_real_escape_string. Failure to do so may result in an SQL injection vulnerability.
set_magic_quotes_runtime
(PHP 4, PHP 5 < 5.4.0)
set_magic_quotes_runtime — 设置当前 magic_quotes_runtime 配置选项的激活状态
说明
bool set_magic_quotes_runtime
( bool
$new_setting
)设置当前 magic_quotes_runtime 配置选项的激活状态。
Warning
本函数已自 PHP 5.3.0 起废弃并将自 PHP 5.4.0 起移除。
参数
-
new_setting -
关闭是
FALSE,开启是TRUE。
返回值
成功时返回 TRUE, 或者在失败时返回 FALSE。
范例
Example #1 set_magic_quotes_runtime() 例子
<?php
// 创建临时文件指针
$fp = tmpfile();
// 写入一些数据
fwrite($fp, '\'PHP\' is a Recursive acronym');
// 没有 magic_quotes_runtime
rewind($fp);
set_magic_quotes_runtime(false);
echo 'Without magic_quotes_runtime: ' . fread($fp, 64), PHP_EOL;
// 有 magic_quotes_runtime
rewind($fp);
set_magic_quotes_runtime(true);
echo 'With magic_quotes_runtime: ' . fread($fp, 64), PHP_EOL;
// 清理
fclose($fp);
?>
以上例程会输出:
Without magic_quotes_runtime: 'PHP' is a Recursive acronym With magic_quotes_runtime: \'PHP\' is a Recursive acronym
参见
- get_magic_quotes_gpc() - 获取当前 magic_quotes_gpc 的配置选项设置
- get_magic_quotes_runtime() - 获取当前 magic_quotes_runtime 配置选项的激活状态
gusb at NOSPAM dot mailinator dot com ¶
1 year ago
Dim ¶
3 years ago
This function seems to be deprecated in PHP 5.3.
I got and error message : Deprecated: Function set_magic_quotes_runtime() is deprecated
serpent at paradise dot net dot nz ¶
9 months ago
Be aware that even using ini_set to set 'magic_quotes_runtime' will stop working in PHP 5.4. See http://php.net/manual/en/info.configuration.php#ini.magic-quotes-runtime
Anonymous ¶
2 years ago
Since this function is depracted as of PHP 5.3, use ini_set('magic_quotes_runtime', 0); instead.
php at nospam-qualystem dot com ¶
10 years ago
get_magic_quotes runtime and set_magic_quotes_runtime are useful when you want to read some data in a binary file using fread() and some bytes in such file may be interpreted as \ (backslash), " (double quotes), ' (simple quote) or any "special" character that has a meaning for string processing.
