How to turn off magic quotes on shared hosting

Question

I want to turn off PHP s magic quotes   I don t have access to php ini   When I tried to add php flag magic quotes gpc off to my  htaccess file  I get a 500 internal server error  This is what my  htaccess file looks like   AddType x-mapp-php5  php php flag magic quotes gpc off   Then I tried to use ini set  magic quotes gpc    O    but that had no effect   How do I turn magic quotes off

User · Answer

BaileyP s answer is already pretty good  but I would use this condition instead   if function exists  get magic quotes gpc    amp  amp  get magic quotes gpc       1       POST   array map   stripslashes     POST        GET   array map   stripslashes     GET        COOKIE   array map   stripslashes     COOKIE        It is more defensive

User · Answer

If you can t turn it off  here is what I usually do   get magic quotes gpc       POST  username     mysql real escape string   POST  username       It will be placed in the database in its proper format

User · Answer

if your hosting provider using cpanel  you can try copying php ini into your web directory and edit it with magic quotes gpc   off

User · Answer

While I can t say why php flag is giving you 500 Internal Server Errors  I will point out that the PHP manual has an example of detecting if magic quotes is on and stripping it from the superglobals at runtime   Unlike the others posted  this one is recursive and will correctly strip quotes from arrays   Update  I noticed today that there s a new version of the following code on the PHP manual that uses references to the super-globals instead   Old version    lt  php if  get magic quotes gpc          function stripslashes deep  value                 value   is array  value                        array map  stripslashes deep    value                        stripslashes  value            return  value               POST   array map  stripslashes deep     POST         GET   array map  stripslashes deep     GET         COOKIE   array map  stripslashes deep     COOKIE         REQUEST   array map  stripslashes deep     REQUEST       gt    New version    lt  php if  get magic quotes gpc           process   array  amp   GET   amp   POST   amp   COOKIE   amp   REQUEST       while  list  key   val    each  process             foreach   val as  k   gt   v                unset  process  key   k                if  is array  v                      process  key  stripslashes  k      v                   process      amp  process  key  stripslashes  k                  else                    process  key  stripslashes  k     stripslashes  v                                     unset  process       gt

User · Answer

This will solve the problem of getting  Class  PDO  not found  when you create a local php ini file   If you can t turn off magic quotes using the htaccess file  for reasons already given by Pete Bailey  just    Create a text file Rename it to  php ini  Add the lines  magic quotes gpc   Off magic quotes runtime   Off magic quotes sybase   Off extension pdo so extension pdo mysql so Save it to the directory ies in which your scripts are executing    Update  if you want to have just one copy of the new php ini file then add this line to your root  htaccess file   SetEnv PHPRC  path to site root public html php ini   Obviously you need to move the ini file to this location of it s not there already   Hope that saves someone the 2 hours it s just taken me

User · Answer

Different hosting providers have different procedures for doing this  so I would ask on their forums or file a support request   If you can t turn them off  you could always using something like this which will escape input regardless of whether magic quotes are on or off     using mysqli  public function escapeString  stringToBeEscaped         return  this- gt getConnection  - gt real escape string stripslashes  stringToBeEscaped

User · Answer

As per the manual you can often install a custom php ini on shared hosting  where mod php isn t used and the php value directive thus leads to an error  For suexec FastCGI setups it is quite common to have a per-webspace php ini in any case   --  I don t think O  uppercase letter o  is a valid value to set an ini flag   You need to use a true false  1 0  or  on   off  value   ini set   magic quotes gpc   0         doesn t work   EDIT  After checking the list of ini settings  I see that magic quotes gpc is a PHP INI PERDIR setting  after 4 2 3   which means you can t change it with ini set    only PHP INI ALL settings can be changed with ini set     What this means is you have to use an  htaccess file to do this - OR - implement a script to reverse the effects of magic quotes   Something like this  if   in array  strtolower  ini get   magic quotes gpc       array   1    on                POST   array map   stripslashes     POST          GET   array map   stripslashes     GET          COOKIE   array map   stripslashes     COOKIE

User · Answer

Does it work if you remove the AddType line  I m not quite sure why that s relevant to turning magic quotes off  If PHP isn t running under mod php  htaccess won t work  Does it work as a CGI    This is one for your hosting company really

User · Answer

I know I m late to answer this  but I read most of the answers and while many were great  only djn actually explained why you were getting this 500 Internal Server Error     While his explanation was 100  correct  this is a perfect example of why you should always wrap those in an  lt IfModule gt    While this won t fix the actual problem of not being able to set those flags in your  htaccess  it will at least prevent the 500 error    lt IfModule mod php5 c gt        put all of your php flags here  for example      php flag magic quotes gpc off  lt  IfModule gt    Or for older versions it would be  lt IfModule mod php c gt  etc   I try to make a habit out of always doing this so as to avoid any such 500 errors   After that  just apply what Peter Bailey said

User · Answer

MY SOLUTION                               rename your php ini to php5 ini   and in the top      add these   magic quotes gpc   Off magic quotes runtime   Off magic quotes sybase   Off extension pdo so extension pdo mysql so   then in  htaccess  add this  in the top    SetEnv PHPRC  home your path to public html php5 ini   p s  change  home your path to  correctly  you can see that path by executing the  lt  php phpinfo      gt  command from a typical  php file

User · Answer

If you re running PHP 5 3  this will do the trick  place it at the topmost of your page   if  get magic quotes gpc       1          GET   json decode stripslashes json encode   GET  JSON HEX APOS    true         POST   json decode stripslashes json encode   POST  JSON HEX APOS    true         COOKIE   json decode stripslashes json encode   COOKIE  JSON HEX APOS    true         REQUEST   json decode stripslashes json encode   REQUEST  JSON HEX APOS    true       Handles keys  values and multi-dimensional arrays

User · Answer

The php flag and php value inside a  htaccess file are technically correct - but for PHP installed as an Apache module only  On a shared host you ll almost never find such a setup  PHP is run as a CGI instead  for reasons related to security  keeping your server neighbours out of your files  and the way phpsuexec runs scripts as  you  instead of the apache user   Apache is thus correct giving you a server error  it doesn t know about the meaning of php flag unless the PHP module is loaded  A CGI binary is to Apache an external program instead  and you can t configure it from within Apache   Now for the good news  you can set up per-directory configuration putting there a file named  php ini  and setting there your instructions using the same syntax as in the system s main php ini  The PHP manual lists all settable directives  you can set those marked with PHP INI PERDIR or PHP INI ALL  while only the system administrator can set those marked PHP INI SYSTEM in the server-wide php ini   Note that such php ini directives are not inherited by subdirectories  you ll have to give them their own php ini

User · Answer

How about   SERVER     if  get magic quotes gpc       1           GET   json decode stripslashes json encode   GET  JSON HEX APOS    true         POST   json decode stripslashes json encode   POST  JSON HEX APOS    true         COOKIE   json decode stripslashes json encode   COOKIE  JSON HEX APOS    true         REQUEST   json decode stripslashes json encode   REQUEST  JSON HEX APOS    true          SERVER   json decode  stripslashes json encode   SERVER JSON HEX APOS    true

[php] How to turn off magic quotes on shared hosting?

Examples related to php

Examples related to magic-quotes-gpc