SQL injection attack

[eluser]Pert[/eluser]
[quote author="frederico" date="1370270635"]

Code:

$this->db->where('col_name','val');
$this->db->update('table_name',array);

This should all be automatically escaped.

For one of the projects I'm saving password change requests with remote IP, also log login both successful and failed tries against user ID and remote IP.

Might be overkill for most projects, but its slightly sensitive data so good to keep a track of things if something goes wrong.

[/quote]