Can such a record protect against sql injections and other PDO evil spirits?

Question

PHP

Hello.
Recently I started to study PDO and found such information that in such a record it is unnecessary to shield the POST request from all evil spirits and injections. Is this true?

$sth=$this->db->prepare("SELECT id FROM users WHERE login=:login AND password=MD5(:password)");
$sth->execute(array(
  ':login'=>$_POST['login'],
  ':password'=>$_POST['password']
));

In this example, I don't check post login, is that correct?
Thank you!

Answer 1

PDO does everything for you . This has already happened.