is mysql escape string necessary

[simpli]

Hi,
I have a model class that extends Zend_Db_Table_Abstract. I use the update and insert functions and I want to know if I have to use mysql_escape_string to avoid sql injection or if the zend functions escape them for me. I am using the pdo_mysql driver.

Thanks for clarifying.
JR

[dhaval4linux]

if you are using Zend_Db_Table method to insert or update data then its not necessary to do mysql_escape_string. that will be done by Zend_Db_Table. if You are running query line INSERT INTO tablename VALUES('sdf','sdf'); then you need to escape that else its not required.