Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:113203 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 58959 invoked from network); 18 Feb 2021 03:50:35 -0000 Received: from unknown (HELO localhost.localdomain) (76.75.200.58) by pb1.pair.com with SMTP; 18 Feb 2021 03:50:35 -0000 To: internals@lists.php.net References: Date: Thu, 18 Feb 2021 03:37:43 +0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.7.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Posted-By: 87.81.129.66 Subject: Re: Potential RFC around PDO From: marandall@php.net (Mark Randall) Message-ID: On 18/02/2021 00:57, Daniel Beardsley wrote: > At iFixit we use a forked version of php with a small change to allow > automatically html-escaping echoed strings: > https://github.com/iFixit/php-src/commit/cb6eb5c35a07c843e5b357884186d77e3a1a2981 Long ago, PHP had a similar feature called Magic Quotes. It is now universally considered to be among the worst and most damaging features that PHP ever introduced. There is no apetite to reintroduce such a thing. Mark Randall