Xss_clean Question

Hi I would like to know if I have use the security class xss_clean correct. Ans is there any where else I should put it on controller? I have attached file.

PHP Code:

if (null !==($this->input->get('directory'))) {
   $directory = $this->security->xss_clean(DIR_IMAGE .'catalog/'. $this->input->get('directory', TRUE));
} else {
   $directory = $this->security->xss_clean(DIR_IMAGE .'catalog');
} 


The controller is loaded by a ajax function

Thank you

Attached Files

  Filemanager.php (Size: 16.56 KB / Downloads: 59)

There's only one rule - please don't tell anyone to go and read the manual.  Sometimes the manual just SUCKS!