not really. Generally, magic quotes is switched off (because it can
cause unwanted changes to data at times). Als in PHP6, magic quotes is
going to be disabled. Given all this, switch magic quotes off and handle
each and every query that runs to the database. This is achieved by
using a custom made function that handles every query before it is sent
to the database server for querying.

abhishek jain wrote:
>
>
>
> Hi,
> I want to know a bit on SQL Injection.
> If in my server i have in php.ini
>
> magic_quotes_gpc = On
>
> Is this sufficient for preventing sql injection?
> Please advice.
>
> Early replies will be appreciated.
> Thanks,
>
> --
> Regards,
> Abhishek jain
>
>