[eluser]NateL[/eluser]
In this little app that I'm writing, i'm curious about what kind of security I should be using.
Visitors will not have any ability to register, post, or submit any kind of content. Only an Admin, after they've logged in, can post content. Should I still consider XSS Filtering?
I am most likely going to use the
$this->db->escape() function...but I just wanted to get some additional feedback on security and what else I should be considering.
Thanks
