Symfony/Doctrine: does model_object->save() filter value? (Prevent SQL injection)
I understand that Doctrine helps against SQL injection attacks. Does the model_object->save()
com开发者_Go百科mand automatically escape unwanted characters, or do I have to write a custom input filter? Thanks.
the exact answer to your question can be found in Doctrine manual implicit-validation.
More info can also be found there: Validator and Data Validation.
Regards.
精彩评论