3 ms·
> Sure enough, the page noted that after years of deprecation, “ext/mysql” had been removed from PHP. “Years of deprecation” is putting it mildly. The original
by smacktoward 7y ago
> Sure enough, the page noted that after years of deprecation, “ext/mysql” had been removed from PHP.
“Years of deprecation” is putting it mildly. The original mysql library was long known to be a huge Achilles’ heel for PHP, missing lots of critical security features, such as prepared statements. mysqli was released as an improved alternative with PHP 4.1, which shipped in December 2001. The original mysql library was officially deprecated as of PHP 5.5; that one shipped in June 2013. By that point, all the literature on PHP best practices had been screaming at people to stop using the original library for more than a decade.
I’m struggling to think of any platform I’ve ever worked with that’s given people that much warning that some feature was going to go away.
- alanh 7y agoHi, author here. I have no doubt you’re right. My only lines of defense are that (1) I didn’t use MySQL directly and I didn’t open myself up to injection attacks, and (2) I stopped being a PHP dev years before 2013. This is custom, legacy code still powering my humble personal site after over a decade.
- hermanradtke 7y ago> I didn’t open myself up to injection attacks Pretty sure you did. And even if you did not, 99% of other people did.
- gregoriol 7y agoIf you stopped being a PHP developer, then stop using it, put your (now deprecated) code offline, you are at risk and might put at risk others.