Does Blesta Sanitize/escape Values It Reads From The Database?

[will]

Does Blesta sanitize/escape values it reads from the database? It seems to sanitize user-input written to the database, but I'm wondering how careful I need to be if I'm writing directly to the database. (e.g. bypassing blesta)

[will]

I'll take that as a no, then.

[Michael]

I believe so, as for CORE-977 you can use this: http://www.blesta.com/forums/index.php?/topic/1852-ldap-authentication-plugin/

 

CORE-1127 is completed in 3.3.0 beta.

[Tyson]

You should always sanitize your input.

[Paul]

I'll take that as a no, then.

 

Blesta sanitizes output where necessary, you just shouldn't assume that it is if you're writing something custom. Make sure.