Filter user input with filtering date
<p>Since I am using PDO to prevent SQL injection, do I still need to apply PHP's data filters to ensure the input is the correct format? Is PDO protect all kind of injections?</p>

<pre><code>$STH = $DBH-&gt;prepare("SELECT * from jem WHERE email=? AND pass=? LIMIT 0,1");
</code></pre>

<p>Any more tip for login script would be help.</p>
