input TYPE_STR , is it safe enough in this case ?

[abualjori]

Hey !


I made a custom profile field , and datamanger was part of the process.


so , here is what I did.

PHP Code:

$vbulletin->input->clean_gpc('p','my_field',TYPE_STR); 


then I used datamangers to set the info

PHP Code:


$test =& datamanager_init('User', $vbulletin, ERRTYPE_STANDARD); 
$test->set_existing($vbulletin->userinfo); 
$test->set('my_field', $vbulletin->GPC['my_field']); 
$test->save(); 


This mod uses bbcode so I need double quotes here,(I missed up every thing when I used TYPE_NOHTML)


does this looks safe enough to be used in my live forums ? and do I have to escape strings etc , or datamanger would take care of it.



Thank you.