Zend Db避免sql注入

public function checkLoginDetails($email, $password) {
    $select = $this->select ();
    $select->where ( "password=?", md5($password) );
    $select->where ( "email=?", $email );
    return $this->fetchRow($select);

}

电子邮件和密码直接来自用户。我需要用mysql\u real\u escape\u字符串过滤电子邮件,还是Zend DB为我过滤?

非常感谢。