title: Should I use addslashes function when I using PDO?
body: <p>I heard that PDO defends Injection Attack automatically.
  So, I can make a query without ' mark.</p>
  
  <p>Then, should I use addslashes function when I using PDO?</p>
  
  <p>I means...</p>
  
  <pre><code>&lt;?php
      $s = $d-&gt;prepare("SELECT * FROM `table` WHERE `no`=:n");
      $s-&gt;bindParam(":n", $data);
      $data = $_GET["param"];
      $s-&gt;execute();
  ?&gt;
  </code></pre>
  
  <p>or</p>
  
  <pre><code>&lt;?php
      $s = $d-&gt;prepare("SELECT * FROM `table` WHERE `no`=:n");
      $s-&gt;bindParam(":n", $data);
      $data = addslashes($_GET["param"]);
      $s-&gt;execute();
  ?&gt;
  </code></pre>