MyBB Community Forums

Full Version: does '$mybb->input' have a secure function??
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi I have added more input values to my homepage.

Do I need to check the input value to prevent sql injection in php file?

like preg_replace?

or '$mybb->input' does secure thing?
No. You want to use $db->escape_string on anything that is being sent to the database. There is a $mybb->get_input function that you can force the input to be of a specific type.