I use NHibernate to persist my objects.. However, I cannot seem to find any information about whether I need to encode inputs?
For example:
string firstName = TextboxFirstName.Text;
string lastName = TextboxLastName.Text;
using(ISession session = sessionFactory.OpenSession())
{
Customer customer = new Customer(firstName, lastName);
session.SaveOrUpdate(customer);
}
Do I need to encode firstName
and lastName
(specifically single qoutes), or does NHibernate do this for me?