I'm writing a custom router for Magento. Here's a code snippet of what I'm doing in the match() method:
$pathInfo = $request->getPathInfo(); $splitPath = explode('/', $pathInfo); $category = $splitPath; .... $categoriesCollection->addAttributeToFilter('url_key', array('eq' => $category));
My question is this: is it safe to assume that the underlying models will take care of any SQL injection attacks etc, or should I be worrying about preventing these problems?
Many thanks for any guidance.