search

Surge-ee / SurgerEE

A collection of simple tags for expressionengine that make template development easier.
Mozilla Public License 2.0
37 stars 8 forks source link

Active record #15

Closed robsonsobral closed 11 years ago

robsonsobral commented 11 years ago

Since we're discussing standards, should be good to use just CodeIgniter Active Record, instead of plain SQL. Active_record is safer than plain SQL and works on others databases than MySQL.

If you agree, I can convert the current functions.

It's good to help.

EpocSquadron commented 11 years ago

With the exception of the years method, all of them use query with the prepared statement syntax (using ?'s in the sql string then passing parameters in an array separately), which applies the same security precautions as active record. But in the interest of more standard code, and to make the years method more secure, I'll go ahead and convert them.