Does CodeIgniter automatically prevent SQL injection?

by

CodeIgniter DOES ESCAPE the variables you pass by when using the $this->db->query method. But ONLY when you pass the variables as binds, here’s an example:

$dbResult = $this->db->query("SELECT * FROM users WHERE username = ?", array($this->input->post('username')));

Also remember that $_POST shouldn’t be preferred over $this->input->post since what it does is check if the variables exists to prevent errors.

More Related Contents:

  1. CodeIgniter Disallowed Key Characters
  2. subquery in codeigniter active record
  3. Convert string to ObjectID in MongoDB
  4. Codeigniter – no input file specified
  5. codeigniter CSRF error: “The action you have requested is not allowed.”
  6. Codeigniter image resize?
  7. Removing specific items from array with MongoDB
  8. How to rewrite the index.php of Codeigniter on Windows Azure
  9. HTTP OPTIONS error in Phil Sturgeon’s Codeigniter Restserver and Backbone.js
  10. Uploading a csv into Codeigniter
  11. Using Mysql WHERE IN clause in codeigniter
  12. Constructor session validation for different functions
  13. How to upload image in CodeIgniter?
  14. COUNT / GROUP BY with active record?
  15. Correct naming structure for CodeIgniter
  16. PostgreSQL next value of the sequences?
  17. How to avoid SQL injection in CodeIgniter?
  18. How to integrate codeIgniter with netbeans fully
  19. Where do I put image files, css, js, etc. in Codeigniter?
  20. Upstream too big – nginx + codeigniter
  21. how to load view into another view codeigniter 2.1?
  22. how to validate array value in codeigniter
  23. CodeIgniter session class not working in Chrome
  24. codeigniter table join
  25. Codeigniter select query with AND and OR condition
  26. codeigniter : Commands out of sync; you can’t run this command now
  27. How does the SQL injection from the “Bobby Tables” XKCD comic work?
  28. Non-web SQL Injection
  29. How do I remove ‘index.php’ from URL in CodeIgniter?
  30. Routes in Codeigniter – Automatically

Leave a Comment