SQLIA on CI

Hello,

I am doing a Thesis on SQL injection in php and codeigniter.

After reading this tutorial:  https://www.roytuts.com/prevent-sql-inje...deigniter/

I wonder if any ci based website can be sql injected ?

Any clue ?

It seems like all the queries must follow on of the following rules:

1) Escaping Queries
2) Query Bindings
3) Active Record

Is it possible to create queries model that do not follow those rules in codeigniter?  Which can be sql injected ?

Any advice ?

Thanks in advance.

" If I looks more intelligence please increase my reputation."