Some doubts regarding Codeigniter and its Input handling capabilities. Some may be a little weird but they are doubts none-the-less. If I use the Active Record Class functions in CodeIgniter, is my input prevented against SQL injection? I read somewhere that it does, but I don't understand it how? or why? Also does xssclean deal with SQL injection in any way?

SQL Injection and Codeigniter

Some doubts regarding Codeigniter and its Input handling capabilities. Some may be a little weird but they are doubts none-the-less.

If I use the Active Record Class functions in CodeIgniter, is my input prevented against SQL injection?
I read somewhere that it does, but I don't understand it how? or why?
Also does xssclean deal with SQL injection in any way?