[eluser]drewjuk[/eluser]
Yes that is true, I don't use any real values in the form values so even if they did try to inject anything it doesn't get outputted anywhere, just if $_GET['blah']==1 then do this etc...
Ok so I have tried to store it in flash data:
$bleh = serialize($_POST['formarray']['formarray']);
//print $bleh."<br/><br/>";
$this->session->set_flashdata('formarray', $bleh);
echo $this->session->flashdata('formarray');
but it does not seem to store anything, every time I call the flashdata back it seems to be empty, any idea what I am doing wrong?