tags:

views:

147

answers:

1
Q: 

CodeIgniter adding semicolons

A: 

I'm not using XSS filtering, since it still have bug in it. For example, you will not be able to post a form that have youtube embed code in it when XSS filtering is on. I only use the filter per field that I want it to sanitized.

If your form is working with XSS filtering turned off, then turned it off. If you need to sanitize it against XSS attack, maybe consider another library, such as HTML purifier.

Donny Kurnia  2010-01-13 11:39:14

related questions

What are possible causes for a large number of sleeping connections to a MySQL Server?
Link to unless current -- possible in CI?
In CodeIgniter, how can I have PHP error messages emailed to me?
Image Manipulation in CodeIgniter
CakePHP or CodeIgniter Longterm Upgrade / Maintainability?
Simple Search: passing form variable to URI?
How to use CodeIgniter/MVC views inside jQuery ajax tabs?
Is there a way to pass arguments to a query in CodeIgniter *without* using ActiveRecord?
How to output data from tables with same column names in CodeIgniter?
Explain this mod_rewrite rule
code igniter / cakephp and ms access
Where should assets go in a code igniter project?
PHP - CodeIgniter - Usage
Best practices: What's the best way for constructing headers and footers? Call it all from the controller, or include from the view file?
How can I just get the "Year" portion from the output of timespan() in CodeIgniter?
Lightest possible PHP MVC
Subfolders in CodeIgniter
Set up Apache for local development/testing?
Which PHP framework is closest to Ruby on Rails? CakePHP? CodeIgniter?
Table Sorting using CodeIgniter
Role Based Access Control
PHP: Object oriented vs. MVC (CodeIgniter)
Can you access a model from inside another model in CodeIgniter?
Smarty integration into the Code Igniter framework.
Code igniter (PHP framework)