Welcome Guest, Not a member yet? Register   Sign In
can I directly use variables from URI?
#1

[eluser]basementDUDE[/eluser]
Is it safe to use the variables from URI directly? I have used the active record class in my model, so I don't need to worry database injection attack right? any security issue with my code? any advise will be really appreciated.

Code:
function showItem($id)
{
//load model... then call model function

$this->item_model->get_item($id);

//load views...
}


in the item_model class

Code:
function get_item($id){

$this->db->where('items.id', $id);

$result = $this->db->get('items');


return $result->result_array();
}


Messages In This Thread
can I directly use variables from URI? - by El Forum - 09-12-2010, 08:09 PM
can I directly use variables from URI? - by El Forum - 09-13-2010, 04:36 AM
can I directly use variables from URI? - by El Forum - 09-13-2010, 07:08 AM
can I directly use variables from URI? - by El Forum - 09-13-2010, 05:55 PM
can I directly use variables from URI? - by El Forum - 09-13-2010, 07:08 PM
can I directly use variables from URI? - by El Forum - 09-13-2010, 08:21 PM
can I directly use variables from URI? - by El Forum - 09-14-2010, 01:35 AM



Theme © iAndrew 2016 - Forum software by © MyBB