Sanitize user input from form data (input text)

Sanitize user input from form data (input text)

Ahirsi
Junior Member
Posts: 16
Threads: 7
Joined: Mar 2021
Reputation: 0

12-08-2021, 07:23 AM

I am currently running CI3 and would like some help on how I can sanitize user input to prevent
1. XSS
2. Input such as <script>alert(some malicious code)</script>
3. HTML Injection
I am using a combination of $this->db->escape_str/$this->db->esscape (Sticks quotes around the input) to save user input and htmlentities when displaying it.
I am able to input <script>alert(some malicious code)</script> and it is not caught or cleaned up by the functions above.

I will appreciate any help.
Hirsi

Messages In This Thread

Sanitize user input from form data (input text) - by Ahirsi - 12-08-2021, 07:23 AM

RE: Sanitize user input from form data (input text) - by captain-sensible - 12-08-2021, 10:32 AM

RE: Sanitize user input from form data (input text) - by Ahirsi - 12-08-2021, 02:06 PM

RE: Sanitize user input from form data (input text) - by includebeer - 12-08-2021, 03:28 PM

RE: Sanitize user input from form data (input text) - by Ahirsi - 12-08-2021, 08:50 PM

RE: Sanitize user input from form data (input text) - by kenjis - 12-08-2021, 06:54 PM

RE: Sanitize user input from form data (input text) - by captain-sensible - 12-09-2021, 02:19 AM

RE: Sanitize user input from form data (input text) - by kenjis - 12-09-2021, 04:55 PM

RE: Sanitize user input from form data (input text) - by includebeer - 12-09-2021, 04:58 PM