SQL Injection and XSS filtering

[eluser]royduin[/eluser]
I've found "html_escape" in CodeIgniter.
If I place this everywhere I'm displaying user input, that will fix it!?

So my Codeigniter website is now 100% save, and when I use that I'm protecting my website too for "html injection"

And.. with the form validation class, the "set_value" is already run trought html_escape?