Symfony / Doctrine: value of model_object-> save () filter parameter? (Deny SQL injection)

Question

I understand that Doctrine helps in SQL injection attacks. Does the command model_object->save()execute unwanted characters, or do I need to write a custom input filter? Thank you

Answer 1

the exact answer to your question can be found in the Doctrine implicit-validation manual .

More information can be found here: Validator and Data Validation .

Sincerely.