title: How to prevent SQL Injection attack in applications programmed in Zend Framework?
body: <p>I don't have any concept about ZF safety. Do I have to use Filter when operating on database? Maybe binding is enough ? How about this:</p>
  
  <pre><code>$users-&gt;update($data, 'id=1');
  </code></pre>
  
  <p>Should $data array be filtered somehow ? Feel free to write anything you know about the issue.</p>
  
  <p>Could you give some links to good articles about safety in ZF (mainly about SQL Injection and XSS)?</p>