I want to know best practice about CI3 security.

Hi Vimal.

Look this:

http://www.codeigniter.com/user_guide/ge...urity.html

Always use $this->input->post('value',TRUE); The TRUE is important for prevent XSS Injections.

David