Does PHP's DateTime class escape date from SQL injection
<p>Usually, I use PDO's prepared statements, type casting to (int), or PDO::quote() to prevent SQL injection.  For this application, I need to modify the date using PHP before adding it to the query.  Do I need to take extra steps to prevent SQL injection, or am I safe?  Thanks</p>

<pre><code>$date = new DateTime($_GET['suspect_user_provided_date']);
$date-&gt;add(new DateInterval('P1D'));
$sql='SELECT * FROM table WHERE date&lt;"'.$date-&gt;format('Y-m-d').'"';
</code></pre>
