does CI provide 'out-of-the box' sollutions for xss and sql injection?

[eluser]Référencement Google[/eluser]
[quote author="ICEcoffee" date="1211407942"]I just knew I'd get a reply with an obvious statement like this[/quote]

Then you should have said before that you was not expecting that kind of newbie answer and without hurting you, your remark quoted above isn't welcomed while somebody is trying to help you.

That said, I second Inparo's answer, he is exactly talking about form validation, that's the only thing I see you should really care of. Of course also, all the basics and fundamentals about server security and PHP programing must apply. The framework is secure while it is used in a clever way, but like all frameworks, you can compromise its security by doing stupid things (like for example storing clear passwords in a database)