Yii Validation Against Sql

Yii 1.1 General Discussion
1

Any word which contains the phrase ‘exit’ can not be inserted to the Mysql database. e.g: complexity, exit. We think this is because of Yii SQL validation against sql injections.

Not even the word “exit” if we tried to enter the word “complexity” we couldn’t insert that also because it has got the word “exit” as a part of it. We have tried this on a static html form directed to itself; on that form also we got the same error message “Forbidden 403”

Pleas someone help me to fix this error on my site.

Thanks

2

This sounds more like an overly cautious web-application firewall like php-ids or mod_security than Yii. Yii’s security model regarding SQL relies on proper escaping, not on filtering any suspicious strings.