Modern PHP doesn't use it - any modern code uses PDO with prepared statements.
Never used it in over 23 years of using PHP. Also, I don't thing that has existed anymore for the past 10 years or so?
Seriously, if we're going to do this, can we also bitch about painful java apps from 10 years ago, or the hilariously shitty modules in node from 10 years ago? I can go on for a while, but you hopefully get the point.
The question was why do I hate it, and it was because of this. I don't understand your confusion.
My confusion is that you hate it tosay because someone over a decade ago wrote 10 times the same complaint that was mostly fixed already since about a decade ago
For me, it was this
https://www.php.net/manual/en/function.mysql-real-escape-string.php
Note that that hasn't existed in PHP for years.
Blame MySQL for that. The PHP API just mirrors the MySQL C API of the same name. https://dev.mysql.com/doc/c-api/8.0/en/mysql-real-escape-string.html
Modern PHP doesn't use it - any modern code uses PDO with prepared statements.
Never used it in over 23 years of using PHP. Also, I don't thing that has existed anymore for the past 10 years or so?
Seriously, if we're going to do this, can we also bitch about painful java apps from 10 years ago, or the hilariously shitty modules in node from 10 years ago? I can go on for a while, but you hopefully get the point.
The question was why do I hate it, and it was because of this. I don't understand your confusion.
My confusion is that you hate it tosay because someone over a decade ago wrote 10 times the same complaint that was mostly fixed already since about a decade ago