Search code examples
phpredbean

RedBeanPHP & User Input Data Sanitation


I've been testing RedBeanPHP.

I'm wondering about sanitizing user input. Do I need to manually sanitize data or will RedBeanPHP take care of that?


Solution

  • RedBeanPHP uses PDO bindings to protect against SQL injection so you don't need to escape manually. However input validation (checking whether the input is valid) should be done using your own models or validation routines.