does CI provide 'out-of-the box' sollutions for xss and sql injection?

[eluser]ICEcoffee[/eluser]

Needless to say you should always be mindful.

I just knew I'd get a reply with an obvious statement like this (no sarcasm intended), but I'm grateful for any help and insight.

what about form validation? please excuse me if this is covered in the user guide. Believe me, I do (on occasion) RTFM.