[eluser]g_montel[/eluser]
Hello
I'm working on the back-office of my website, and the user can input some HTML on the news database.
The problem I have is, on my controller, if I use
Code:
$content = set_value('content')
The content is "htmlentities"-fied (i.e. <b> are transformed to & l t ; b & g t ; )
if I use
Code:
$this->input->post('content', TRUE)
It works OK.
But is it secure enough ? Should I use set_value ?
Thanks for your help
Geoffroy