Display data securely which come from database

For a query with

PHP Code:

$this->db->query($sql, array( $var )); 


 superglobals must be bind when using. But is it safe in CodeIgniter when I read data from the database and then display them? I usually do that with htmlspecialchars() , how do I handle it as now in Codeigniter?

You should still use htmlspecialchars() and similar functions. CodeIgniter do not format, escape or filter the database output for you.

What it does, when using the Query Builder Class, is escaping you queries that insert/update data in the database.

Thanks a lot!