Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
697 views
in Technique[技术] by (71.8m points)

php - Code Igniter security with insert function

I would like to know if the following piece of code would require any more security concerning SQL injections, or not?

$this->db->insert('users', $insert_data_array);

The Code Igniter wiki says that

"Note: All values are escaped automatically producing safer queries."

Please remove my doubts.

See Question&Answers more detail:os

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Reply

0 votes
by (71.8m points)

Make sure you have XSS filtering enabled (you can do this in the config.php file). It filters all $_POST and $_GET variables before they're inserted into your DB.


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
OGeek|极客中国-欢迎来到极客的世界,一个免费开放的程序员编程交流平台!开放,进步,分享!让技术改变生活,让极客改变未来! Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...