is this a hijack script for stripslashes and magicquotes?

[surrealillusions]

Found this file on my server on one of my sites after a contact form got hijacked. My php knowledge is basic, but it looks to me they're checking for magicquotes and stripslashes functions, and forcing the script they're hijacking to ignore them, so they can inject a load of nasty stuff into the form?

function nukeMagicQuotes() {
if (get_magic_quotes_gpc()) {
function stripslashes_deep($value) {
$value = is_array($value) ? array_map('stripslashes_deep', $value) : stripslashes($value);
return $value;
}
$_POST = array_map('stripslashes_deep', $_POST);
$_GET = array_map('stripslashes_deep', $_GET);
$_COOKIE = array_map('stripslashes_deep', $_COOKIE);
}
}

[jatar_k]

it looks like a standard function for nuking magicquotes

as magicquotes is quite undesirable most software has something like this in it

[dreamcatcher]

Its just a rewrite of a function mentioned on the PHP website.

[uk.php.net...]

dc

[surrealillusions]

ok..thanks..

maybe its just me been over paranoid

:)

[dreamcatcher]

Not necessarily a bad thing being over paranoid. Magic Quotes are being removed in PHP6 btw.

dc