Question

Assuming i have

$_POST["x"]["y"] = 5;

how can i

Yii::app()->request->getPost('x[y]');

how can i retrieve the post variable by index ?
and is there any yii function that checks for sql injection ? does the getPost do that check ?

Thank you .

Answer 1

I am not familiar with yii, but looking at the source code for the function
https://github.com/yiisoft/yii/blob/1.1.12/framework/web/CHttpRequest.php

You would do

$x = Yii::app()->request->getPost('x');
$y = $x['y'];

The getPost function WILL NOT prevent sql injection. Please read http://www.yiiframework.com/wiki/275/how-to-write-secure-yii-applications/#hh11 for more information on securing your yii application