SQL Injection

Use the query builder, is super friendly. Check the link posted above

Also, enable global_xss_filtering on your config.php file. Note that this function is deprecated though so try not to depend on it.

PHP Code:

$config['global_xss_filtering'] = TRUE; 


In addition, check out the Security class https://codeigniter.com/user_guide/libra...urity.html.