jamierumbelow/codeigniter-base-model — pull request #130 by RonnieSkansing (2013-08-04 17:24:04+00:00)
Title: #issue 64 - Fixed validate function so native functions work and no xss. 

Set the validate function to return $_POST instead of data, as the prepped data is transfered back to $_POST.

Unless we do this, something like

is passing into the db even with a rule like 'trim|strip_tags'