pkp/omp — comment on commit f9cc5120e506075a6fbf323260f8914216f942d8
File: controllers/grid/catalogEntry/PublicationFormatGridHandler.inc.php line 266
By asmecher:

(We often do this both in the DAO and in the handler class, but they're for different purposes. In the DAO, it's to prevent PostgreSQL from complaining about malformed SQL. In the Handler, it's e.g. to prevent XSS injections in numeric arguments that are bounced back off of the handler. Often this will result in the same thing getting cast twice, but it does no harm.)