|Reported by:||thanatica2||Owned by:|
wp_magic_quotes has no right to exist. Not anymore, anyway.
Magic quotes has been removed from PHP for good reason, and wordpress appears to be adding magic quotes even for custom non-wordpress code. I have been pulling my hair out trying to figure out where the hell those magic quotes where coming from. And now I see no way of preventing wordpress from adding magic quotes, other than removing whatever wordpress is adding. Such a waste.
It also creates a $_REQUEST variable, which is also in PHP by default. No need to re-add it. It may well be slightly different from PHP's default one, which would make it even worse, because custom code may depend on it.
At the VERY least, only add magic quotes for wordpress-related code and/or make the standard get_magic_quotes_gpc() somehow return true if you absolutely must magicquote every byte coming in.