php - Laravel HTML and SQL sanitisation -


what appropriate ways html sanitisation , sql sanitisation in laravel 4?

sql sanitisation handled automatically. docs:

note: laravel query builder uses pdo parameter binding throughout protect application against sql injection attacks. there no need clean strings being passed bindings.

blade templates automatically escape variables when using curly brackets, e.g. {{ $var }}. if not want escape html, need use {!! $var !!} instead.


Comments

Popular posts from this blog

jquery - How do you format the date used in the popover widget title of FullCalendar? -

asp.net mvc - SSO between MVCForum and Umbraco7 -

Python Tkinter keyboard using bind -