title: PrestaShop Validator: SQL security issues
body: <p>Good evening,
  I'm validating PrestaShop on my form.
  The mistake is reflected:</p>
  
  <blockquote>
    <p>Your module contains security issues. 
        - Make sure that your data is always protected when doing an insertion. For instance, make sure that you do have an integer with an
    explicit (int) cast, and that text is protected against SQL injections
    thanks to the pSQL() method. 
        - Be careful (string) is not a secured cast, you must pSQL.</p>
  </blockquote>
  
  <p>The insert query I use are as follows:</p>
  
  <pre><code>Db::getInstance()-&gt;execute('INSERT IGNORE INTO '._DB_PREFIX_.'ff_list_filter (name, content) VALUES ("'.$t['filter_template_name'].'","'.  str_replace('"', '\"', serialize($t)).'")');
  </code></pre>
  
  <p>or</p>
  
  <pre><code>Db::getInstance()-&gt;execute('INSERT IGNORE INTO `'._DB_PREFIX_.'ff_people` (`field`,`list`) VALUES ("'.$c-&gt;email.'",'.$listId.')');
  </code></pre>
  
  <p>or</p>
  
  <pre><code>Db::getInstance()-&gt;execute('INSERT IGNORE INTO '._DB_PREFIX_.'ff_custom_field (field, list) VALUES ("'.$field.'"," ","'.$list.'")');
  </code></pre>
  
  <p>Have you ever seen anything like that?</p>