Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
694 views
in Technique[技术] by (71.8m points)

php - Code Igniter security with insert function

I would like to know if the following piece of code would require any more security concerning SQL injections, or not?

$this->db->insert('users', $insert_data_array);

The Code Igniter wiki says that

"Note: All values are escaped automatically producing safer queries."

Please remove my doubts.

See Question&Answers more detail:os

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)

Make sure you have XSS filtering enabled (you can do this in the config.php file). It filters all $_POST and $_GET variables before they're inserted into your DB.


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
...