Security - Configuration - 1
The issue: Incorrect escaping in data storages and output.
Decreases performance of your complete application
For proper escaping you need strip_slashes() and the storage specific function.
The solution: Turn off magic_quotes in production environment and escape properly.
Undo magic_quotes.
]]>
Such recursive functions can easily be exploited - this will consume all of the servers memory and crash the script.
]]>
Use the following faster and safer script.
$val) {
if (!is_array($val)) {
$in[$k][$key] = stripslashes($val);
continue;
}
$in[] =& $in[$k][$key];
}
}
unset($in);
}
?>]]>