From af368e1f1a776247b10c4ae25d879b6e6afadfe0 Mon Sep 17 00:00:00 2001 From: Derek Jones Date: Mon, 25 Feb 2008 21:43:26 +0000 Subject: fixed typo in sample code for protecting identifiers --- user_guide/database/queries.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/user_guide/database/queries.html b/user_guide/database/queries.html index ba69fedb9..59f7e23b4 100644 --- a/user_guide/database/queries.html +++ b/user_guide/database/queries.html @@ -86,7 +86,7 @@ It simply lets you submit a query. Most users will rarely use this function.

// outputs prefix_tablename

Protecting identifiers

In many databases it is advisable to protect table and field names - for example with backticks in MySQL. Active Record queries are automatically protected, however if you need to manually protect an identifier you can use:

-

$this->db->protect_identifier('table_name');

+

$this->db->protect_identifiers('table_name');

Escaping Queries

It's a very good security practice to escape your data before submitting it into your database. CodeIgniter has two functions that help you do this:

-- cgit v1.2.3-24-g4f1b