News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Lorna Mitchell's Blog:
Stopping CodeIgniter from Escaping SQL
January 28, 2010 @ 13:39:45

In a project she's been working on Lorna Mitchell was frustrated with something the CodeIgniter framework does natively - escape SQL statements done through the databaase layer's "select()" method. Thankfully, there was a simple fix to turn this behavior off.

I've been getting increasingly impatient with its tendency to try to escape my SQL code for me - this is a really useful default feature but it seems to assume I don't know what I'm doing and so it puts backticks all over perfectly acceptable SQL code, very annoying!

Thanks to a reply on twitter from damiangostomski to her frustrations she found the optional second parameter you can give the "select()" method, a boolean that tells it whether or not to escape the query (it's mentioned here) for those that were wondering.

2 comments voice your opinion now!
codeigniter escape sql optional parameter


blog comments powered by Disqus

Similar Posts

PHPBuilder.com: Mitigate the Security Risks of PHP System Command Execution

Community News: ExpressionEngine/CodeIgniter Conference 2010

Lorna Mitchell's Blog: Stopping CodeIgniter from Escaping SQL

DevShed: Paginating Blog Entries with Code Igniter

NetTuts.com: How to Upload Files with CodeIgniter and AJAX


Community Events





Don't see your event here?
Let us know!


update interview library tips community podcast series opinion api package introduction install deployment release unittest framework language symfony laravel zendserver

All content copyright, 2014 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework