Hacker News new | ask | show | jobs
by krapp 2984 days ago
> What if they enjoy writing non tokenized SQL statements with user input and without an ORM?

Those functions have been deprecated in PHP for years, and they were just wrappers around existing C libraries to begin with/

And other languages have that as well. I've seen it done in C# and C++.

1 comments

I wasn’t talking about SQL in PHP, I was talking about people who like pursuing sloppy and careless software engineering practices in general, like writing unsafe SQL queries using string concatenation [in any programming language].

Using PHP is the same thing.

The story about FizzBuzz is not literally asking you to implement FizzBuzz. It’s an illustration.

My comment could be rephrased: just because many people like doing things that are bad does not mean that those things aren’t bad. It just means that many people are ignorant.