Symfony/Doctrine: does model_object->save() filter value? (Prevent SQL injection)

I understand that Doctrine helps against SQL injection attacks. Does the model_object->save() com开发者_Go百科mand automatically escape unwanted characters, or do I have to write a custom input filter? Thanks.

the exact answer to your question can be found in Doctrine manual implicit-validation.

More info can also be found there: Validator and Data Validation.

Regards.