Welcome Guest, Not a member yet? Register   Sign In
What is the difference in the codes?(security)
#9

[eluser]mdvaldosta[/eluser]
I suggest using the third code. It's cleaner, and does everything you need using the tools CI provides.

The second code, however, doesn't protect from XSS though as far as I know. Active record escapes data, but doesn't prevent xss. You need to do that with your post data, either through $this->input->post('post_data', TRUE) or in your config sitewide.


Messages In This Thread
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 06:09 AM
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 06:24 AM
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 06:45 AM
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 07:23 AM
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 07:26 AM
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 07:44 AM
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 10:26 PM
What is the difference in the codes?(security) - by El Forum - 12-01-2010, 10:59 PM
What is the difference in the codes?(security) - by El Forum - 12-02-2010, 08:36 AM



Theme © iAndrew 2016 - Forum software by © MyBB