magic quotes gpc settings

[Gian04]

For optimal security what should be the settings of my magic_quotes_gpc? OFF or ON?

[jatar_k]

having it on is a hassle and provides a false sense of security

it will be gone in php 6
[php.net...]

[Gian04]

I installed Joomla, and it says that I should turn it ON for optimum security

[jatar_k]

they're lying

the software should do all data cleaning and not rely on a server setting that may, or may not, be set to do some of it.

When magic_quotes are on, all ' (single-quote), " (double quote), \ (backslash) and NUL's are escaped with a backslash automatically.

not adequate to represent "secure"