title: How do you bind parameters when using Doctrine's EntityRepository::matching() method with a Criteria object?
body: <p>I'm trying to use <code>Criteria</code> objects and the <code>EntityRepository::matching()</code> method to query my db:</p>
  <pre><code>$criteria = new Criteria();
  $criteria-&gt;where(Criteria::expr()-&gt;eq('applied', false))
           -&gt;andWhere(Criteria::expr()-&gt;eq('cancelled', false))
           -&gt;andWhere(Criteria::expr()-&gt;eq('identifier', $identifier)) // danger Here
  
          ;
  
  $results = $this-&gt;matching($criteria);
  </code></pre>
  <p>Problem is, one of the criteria parameters may come from the end-user (<code>$identifier</code>, specifically).</p>
  <p>But <code>Criteria</code> and <code>matching(Criteria)</code> do not seem to allow to set and bind parameters.</p>
  <p>How do I do perform these queries safely? Are parameters bound automatically for any query peformed with <code>EntityRepository::matching()</code>?</p>