Are Codeigniter - Active Records Vulnerable to SQL Injections?

后端 未结 2 642
甜味超标
甜味超标 2021-01-27 00:05

Just read this on Stack overflow and thus left me wondering if SQL injection is possible through active records in CI.

At most of the places in my project, for user regi

2条回答
  •  無奈伤痛
    2021-01-27 00:43

    CodeIgniter is strip slashing the quotes and vulnerable scripts when using active records rather than running direct SQL queries.. So no wories for using Active records...

    mysql_real_escape_string and some checks are done internally when its generating the SQL query to run..

提交回复
热议问题