[TYPO3] cleaned post variables in php

[a owen]

hi,

i want to make a extension that saves data. my question is if typo3
filters bad data (sql-injection, html-tags, ...)?

thanks
andi