MDL-14983 add magic quotes stripping option into data_submitted()

diff --git a/lib/weblib.php b/lib/weblib.php
index f88e0341c29a1f5dbd0b4d76ada54238ccb88d21..621f40ace3babaaaf61f7914fa686926e193b35f 100644 (file)
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -449,15 +449,20 @@ class moodle_url {
  *
  * Checks that submitted POST data exists and returns it as object.
  *
- * @param string $url not used anymore
+ * @param bool slashes TEMPORARY - false if strip magic quotes
  * @return mixed false or object
  */
-function data_submitted($url='') {
+function data_submitted($slashes=true) {
 
     if (empty($_POST)) {
         return false;
     } else {
-        return (object)$_POST;
+        if ($slashes===false) {
+            $post = stripslashes_recursive($_POST); // temporary hack before magic quotes removal
+            return (object)$post;
+        } else {
+            return (object)$_POST;
+        }
     }
 }