title: Zend Db avoiding sql injections
body: <p>I have the following code:</p>
  
  <pre><code>public function checkLoginDetails($email, $password) {
      $select = $this-&gt;select ();
      $select-&gt;where ( "password=?", md5($password) );
      $select-&gt;where ( "email=?", $email );
      return $this-&gt;fetchRow($select);
  
  }
  </code></pre>
  
  <p>email and password come directly from the user. Do I need to filter email with, say, mysql_real_escape_string or does Zend DB do it for me?</p>
  
  <p>Thank you! </p>