To summarize some of the other (upvoted) comments on this cringe-worthy article: Output to any external system must be encoded to prevent fill-in-the-blank inj

To summarize some of the other (upvoted) comments on this cringe-worthy article: Output to any external system must be encoded to prevent fill-in-the-blank injection, if it uses a language vs a string API-only approach. Used prepared statements. SQL is not COBOL. Sets != ISAM. You can store arbitrary data (XML, JSON) in BLOBS/CLOBS in an RDBMS. Denormalization is frowned upon, but not forbidden. PostgreSQL is arguably a better free / open DBMS than MySQL. DBMS data constraints are a good thing; use them when they make sense.