> The ecosystem has a ton of exposed wires in builtins and libraries. PHP is a light wrapper around C libraries. > When the function's name is literally `mysq

> The ecosystem has a ton of exposed wires in builtins and libraries. PHP is a light wrapper around C libraries. > When the function's name is literally `mysql_real_escape_string` ... what does that tell you? That it comes from the MySQL directly: https://dev.mysql.com/doc/c-api/8.0/en/mysql-real-escape-string.html https://dev.mysql.com/doc/c-api/8.0/en/mysql-real-escape-str...