> The answer to your question is that PHP's mysql library was pretty much alone, even at the time, in not supporting parametrization. And at the same time ever

> The answer to your question is that PHP's mysql library was pretty much alone, even at the time, in not supporting parametrization. And at the same time everyone and their grandmother was making websites using PHP and MySQL. There should have been enough incentive to improve this early on.