is this stamenet true or false: if I use $this->form_validation->set_rules then I don't need to sanitise the input?

[eluser]InsiteFX[/eluser]
No! you still should use the xss_clean

Code:

$username = $this->input->post('username', TRUE);
$password = $this->input->post('password', TRUE);