Cleaning a variable string for database entry

[ramjet]

How do I properly clean a string in preparation for database entry?
The string is not inputted through get or post, but rather returned from a script retrieving an email message body via imap_fetchbody() and i want to preserve html tags.

Is just calling this->Input->xssClean($my string) enough?

[thyon]

The database driver already cleans. You just have to pass it in the "execute" part to replace the ? in the "prepare" section

[ramjet]

nice'n'easy then :D