title: Escape arguments for PDO statements?
body: <p>New to PDO - do I need to escape arguments I'm passing into a PDO prepared statement (such as the following):</p>
  
  <pre><code>$_GET['name'] = "O'Brady";
  
  $sth = $dbh-&gt;prepare("INSERT INTO users SET name = :name");
  $sth-&gt;bindParam(':name', $_GET['name']);
  $sth-&gt;execute();
  </code></pre>