[pilsetnieks]

> why you'd want to filter the _GET/etc supervars on input

I get that the solution he proposed is different, and also reasonably sane, but isn't this basically what magic quotes did? Now that that nightmare is finally over, I'm not too keen on reliving it again.