Question

I’m in the process of building a site with CodeIgniter. This is the 1st site that I’ve built myself that interacts with a database. I’m using MySQL for this project. How can I tell if data needs to be escaped before saving it to the database?

Answer 1

If you’re using the database class with query bindings, you don’t have to do any manual escaping:

The secondary benefit of using binds
is that the values are automatically
escaped, producing safer queries. You
don’t have to remember to manually
escape data; the engine does it
automatically for you.