Test my forms for proper query escaping

Question

CodeIgniter claims do sanitize POST variables. I'm also using DataMapper which I believe also does it's own thing. I would like to double check to make sure it's doing what it's supposed to be doing. How can I do this?

I'd like to test this without destroying anything, would typing random escaped characters work? What should I see entered into the database vs. what I typed?

Can anyone confirm that CI and DataMapper do this?

Answer 1

Just check if what you type is the same as what's in your database. If it isn't, it's probably doing something...

Script characters should be escaped to their html entity equivalent I'm assuming.