User Submitted Data
What are Magic Quotes
Security
PHP Manual

# Magic Quotes

Table of Contents

- What are Magic Quotes
- Why did we use Magic Quotes
- Why not to use Magic Quotes
- Disabling Magic Quotes

Warning

This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0.

Magic Quotes is a process that automagically escapes incoming data to the PHP script. It's preferred to code with magic quotes off and to instead escape the data at runtime, as needed.