Magic Quotes & Disable Functions...

I am wondering why dolphin says to have magic quotes off and nothing in disable function in the php.ini

my settings are...

disable_functions = system, show_source, symlink, exec, dl, shell_exec, passthru, phpinfo, escapeshellarg, escapeshellcmd, ini_set

magic_quotes_gpc = on

I have these settings like this for security purposes, is there any real reason why this would mess up anything in dolphin at all?

Dolphin claims to do all the escaping so that is why it recommends you turn magic_quotes_gpc off... but it seems to run fine with it on.

About the disable functions.. the only one you have listed that Dolphin uses is exec. I don't remember what it uses it for but I do remember having to remove it from my disable_functions a long time ago for something to work.

Exec is needed to process videos. May something else. Can't remember.

Also phpinfo is used in the admin panel.

ini_set is also used to change some settings at run time. I don't think it will be a problem, but the areas of code in dolphin that does it will need to be commented out.

As for magic_quotes_gpc. Dolphin used to require it, but now escapes things itself so now it is recommended it be turned off because it is a depreciated feature that will be removed from future versions of php.

ok thank you  guys, so this is what im gathering so far...

turn magic quotes off since dolphin does it anyway, remove exec, phpinfo as& ini_set from the disable functions.

other than that im cool right

You can leave php_info in the disable functions, you just won't be able to see your server settings in the dolphin admin.

You should also be able to leave ini_set in your disable functions too if you take this out of /inc/header.inc.php:

ini_set('magic_quotes_sybase', 0);

About magic quotes, yeah turn them off.. like Deano said it's going to be depreciated soon anyway.

Turning it off will be fine.

If the directive magic_quotes_sybase is ON it will completely override magic_quotes_gpc. So even when get_magic_quotes_gpc() returns TRUEneither double quotes, backslashes or NUL's will be escaped. Only single quotes will be escaped. In this case they'll look like: ''