Does code igniter stop SQL Injection?

[eluser]sl3dg3hamm3r[/eluser]
[quote author="Bogdan Tanase" date="1245153764"]

Code:

$this->db->query("SELECT * FROM products WHERE prod_name='$prod_name'");

I believe this is not escaped, right?[/quote]

Right, in that case you would need to escape manually.