CodeIgniter 1.7

Adding security to our site

Security is an important concern for every website or online application. CI helps us keep our site safe, starting from URI security to global variables turned off, XSS filtering, data validation, and so on.

Some of these tools are run by default by CI, like the URI security, and we can even define the XSS filtering to run globally; this is done in our config file:

$config['global_xss_filtering'] = FALSE;

Other of these tools are run manually such as the form validation class and query escaping. Together these functions help us with securing the application.

Note

Benefits are:

Ease of use when adding security to our application and forms. And very important—thanks to some of those functions—our sites are more secure by ...