I'm writing a custom router for Magento. Here's a code snippet of what I'm doing in the match() method:
$pathInfo = $request->getPathInfo();
$splitPath = explode('/', $pathInfo);
$category = $splitPath[1];
....
$categoriesCollection->addAttributeToFilter('url_key', array('eq' => $category));
My question is this: is it safe to assume that the underlying models will take care of any SQL injection attacks etc, or should I be worrying about preventing these problems?
Many thanks for any guidance.