CODEWITHSUNDEEP
doctrinesql-injectionsymfony-1.4
whamsicore
whamsicore

Reputation: 8700

Symfony/Doctrine: does model_object->save() filter value? (Prevent SQL injection)

I understand that Doctrine helps against SQL injection attacks. Does the model_object->save() command automatically escape unwanted characters, or do I have to write a custom input filter? Thanks.

Upvotes: 3

Views: 559

Answers (1)

Mihail Dimitrov
Mihail Dimitrov

Reputation: 574

the exact answer to your question can be found in Doctrine manual implicit-validation.

More info can also be found there: Validator and Data Validation.

Regards.

Upvotes: 1

Related Questions