php - Laravel HTML and SQL sanitisation -


what appropriate ways html sanitisation , sql sanitisation in laravel 4?

sql sanitisation handled automatically. docs:

note: laravel query builder uses pdo parameter binding throughout protect application against sql injection attacks. there no need clean strings being passed bindings.

blade templates automatically escape variables when using curly brackets, e.g. {{ $var }}. if not want escape html, need use {!! $var !!} instead.


Comments

Popular posts from this blog

python - Installing PyDev in eclipse is failed -

PHP OOP-based login system -

python - Exception while importing pymorphy2 -