What about security in CI?

[eluser]BrianDHall[/eluser]
CI's built-in SQL helper/class and ActiveRecord all automatically handle escaping special characters for you, you don't have to worry about doing it manually. It's a really nice time-saver, one less thing to worry about.

You should still do basic data sanitizing using form validation and common sense, but you don't have to worry about escaping special chars.