title: cakephp - sql injection test always shows failure
body: <p>I have project developed using cakephp 1.3 and for testing I used <a href="https://addons.mozilla.org/en-US/firefox/addon/7597/" rel="noreferrer">SQL Inject me addon</a> (firefox)</p>
  
  <p>From <a href="http://book.cakephp.org/view/153/Data-Sanitization" rel="noreferrer">cakephp manual</a>, what I understood is, the save() and find() methods will automatically protect the data from SQL injection. But while running "SQL inject me" test, I am always getting failures as result. </p>
  
  <p>For ex: Results:
  Server Status Code: 302 Found
  Tested value: 1' AND 1=(SELECT COUNT(*) FROM tablenames); --
  Server Status Code: 302 Found
  Tested value: '; DESC users; --
  Server Status Code: 302 Found
  Tested value: 1'1</p>
  
  <p>I have tried with cakephp santize methods, then also I am getting the errors in "sql inject me". </p>
  
  <p>Any help ?</p>
  
  <p>Sample code</p>
  
  <pre><code>$this-&gt;data['User'] = Sanitize::clean($this-&gt;data['User'], array('encode' =&gt; false));
  $this-&gt;User-&gt;save($this-&gt;data); 
  </code></pre>