Does CodeIgniter automatically prevent SQL injection when using function like insert(), update() , where(), order_by()?

Question

Note :My question is not a duplicate question for Does CodeIgniter automatically prevent SQL injection? or how to avoid sql injection in codeigniter because it asked query() function. I am asking function like insert(), update() , where(), order_by()?

I am asking that following types of queries also automatically prevent SQL injection?

01.

$data = array(
        'title' => $title,
        'name' => $name,
        'date' => $date
);

$this->db->where('school', $school);
$this->db->update('mytable', $data);

02

$this->db->select('*');
$this->db->from('table_name');
$this->db->where('pro_name', $pro_name);        
$this->db->order_by($pro_type, 'desc');
$query = $this->db->get();
return $query->result_array();

Assume that all variables are GET or POSTS values.

@GhanshyamBhava It is not a duplication question too that quetion too because it is also asked the query() function. I am asking about function like` insert(), update() , where(), order_by()`? — Damith Ruwan
– Damith Ruwan, Commented Jun 6, 2017 at 4:34
Does this answer your question? how to avoid sql injection in codeigniter — Dharman
– Dharman ♦, Commented Nov 14, 2021 at 19:41

Jeevan · Accepted Answer · 2017-06-06 06:33:57Z

1

CodeIgniter's Active Record methods https://www.codeigniter.com/userguide2/database/active_record.html automatically escape queries for you, to prevent injection.

You may find answer in here https://stackoverflow.com/a/5857481/4895810

answered Jun 6, 2017 at 6:33

Jeevan

3574 silver badges18 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Does CodeIgniter automatically prevent SQL injection when using function like insert(), update() , where(), order_by()?

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related