Codeigniter MySQL security, htmlspecialcharacters & mysql_real_escape_string?

Question

I've been reading a lot about database security and using htmlspecialcharacters() and mysql_real_escape_string.

Is this necessary to use these functions with codeigniter or does it handle this automatically? eg

$this->db->select('*', FALSE);
$this->db->where('published', 'yes');
$query = $this->db->get('my_table');
$results = $query->result_array()

Answer 1

只要使用活动记录，就不必担心转义文本。