php - Laravel HTML and SQL sanitisation -


what appropriate ways html sanitisation , sql sanitisation in laravel 4?

sql sanitisation handled automatically. docs:

note: laravel query builder uses pdo parameter binding throughout protect application against sql injection attacks. there no need clean strings being passed bindings.

blade templates automatically escape variables when using curly brackets, e.g. {{ $var }}. if not want escape html, need use {!! $var !!} instead.


Comments

Popular posts from this blog

asp.net mvc - SSO between MVCForum and Umbraco7 -

Python Tkinter keyboard using bind -

ubuntu - Selenium Node Not Connecting to Hub, Not Opening Port -