Actually this looks wrong. The reverse of `echo stripslashes(htmlspecialchars($_POST['db_password']));` should be `urldecode(addslashes($db_pwd))` and this doesn’t look right. I’m going to test this again with MySQL passwords with backslashes.

The only trouble is that with this magic quote complication I am having difficulty figuring out how to synthesize input that corresponds to what the forms will generate at runtime. I will have to figure this out before I begin working on the forums.