I have a concern about security filters. PHP functions like "my_sqli_real_escape", "htmlspecialchar" or "htmlentities", encryption scripts for passwords, etc. in order to avoid injections, are included in your forms or do I have to include them manually? Or maybe, are they "included on a different way"?

WFB 2.9 has lots lots of files and some of them might be related to sanitize the user inputs, so I may not need to add FILTERS_, right? This leads me to talk about validation from the server side, do I have to also code it manually? Thanks for your orientation.

The Form Builder has all of the needed validation on not only the front end but the back end. CC put a lot of thought into it.