Best way to get validated form data into a database

[eluser]Pascal Kriete[/eluser]
You're right, you definitely want to filter what you're inserting. I use something similar to this (in an extended form validation class):

Code:

/**
* Filters allowed post keys
*
* @access    public
* @param     post data
* @return     cleaned array
*/
function filter_input_data($data)
{
    $allowed = $this->_field_data;
    return array_intersect_key($data, $allowed);
}

Then use it like this:

Code:

$db_clean = $this->validation->filter_input_data($_POST);

[Edit: PHP >= 5.1 only]