CodeIgniter 2.2.3 Released

CodeIgniter 2.2.3 has been released today, and is a security release for the 2.x branch.


Removed a fallback to mysql_escape_string() in the 'mysql' database driver (escape_str() method) when there's no active database connection.

Since most have moved on to the development version of 3.0 from the GitHub repo, these fixes only affect sites powered by the legacy version. Sites running the development version of 3.x are unaffected as they have already been addressed in that version line. We felt that sites who were still running 2.x and potentially impacted by the vulnerability warranted an update so the release available for that version line is secure.

You can download v2.2.3 now, and we encourage you to read the full changelog.

Thank you so much, I have a few CI 2 sites which I have not had time to upgrade to CI 3 yet, this is great !