php - Laravel HTML and SQL sanitisation -
what appropriate ways html sanitisation , sql sanitisation in laravel 4?
sql sanitisation handled automatically. docs:
note: laravel query builder uses pdo parameter binding throughout protect application against sql injection attacks. there no need clean strings being passed bindings.
blade templates automatically escape variables when using curly brackets, e.g. {{ $var }}
. if not want escape html, need use {!! $var !!}
instead.
Comments
Post a Comment