When building applications is always smart to check and clean the user input. This is a must when you building a website or public application. I create always an instance of Sanitize class in my AppController and then using it in all of my controllers like this <?php uses('Sanitize'); class AppController extends Controller { [...]
