From ed78b604797d69116206d37f8b4400996b8cbc0a Mon Sep 17 00:00:00 2001 From: LiamKearn <76269376+LiamKearn@users.noreply.github.com> Date: Fri, 30 Jul 2021 20:50:40 +1000 Subject: [PATCH] Update 04_Secure_Coding.md Fix(Format): Warning format missing entry tag. --- docs/en/02_Developer_Guides/09_Security/04_Secure_Coding.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/en/02_Developer_Guides/09_Security/04_Secure_Coding.md b/docs/en/02_Developer_Guides/09_Security/04_Secure_Coding.md index f3e0c4112..e421e7646 100644 --- a/docs/en/02_Developer_Guides/09_Security/04_Secure_Coding.md +++ b/docs/en/02_Developer_Guides/09_Security/04_Secure_Coding.md @@ -94,6 +94,7 @@ Example: $members = Member::get()->where(sprintf('"Name" = %s', Convert::raw2sql($_GET['name'], true))); ``` +[warning] It is NOT good practice to "be sure" and convert the data passed to the functions above manually. This might result in *double escaping* and alters the actually saved data (e.g. by adding slashes to your content). [/warning]