Yii: Is this the right way to work with models, security issues?

Question

Yii

Hello!
There is an application which saves the entered data of the user in a DB.
Code example

$newVisit = new MYMODEL();
      $newVisit->SERVICEID = $serviceId;
      $newVisit->VISITEDDATE = new CDbExpression('sysdate');
      $newVisit->NAME = $_POST['name'];
      $newVisit->COST = $_POST['amount'];
      $newVisit->TERM = $_POST['term'];
      $newVisit->USERID = $_POST['uid'];
      $newVisit->save();

The question is, is this save method safe, or is it better to work directly with PDO?
If my question seems trivial to you, I'm sorry to understand, I'm not special in this matter.

Answer 1

Certainly safe, especially since the model has validation rules.

Answer 2

If you write rules () in the model to validate the received data, then in theory there should be no other data there, only those that have passed validation. Therefore, it is quite safe, but depends on your prescribed rules.

Answer 3

Why not $model->load(Yii::$app()-request->post())?