I wouldn't be so hard on php for the mysql_* functions; they're wrappers around the C functions of the same names: http://dev.mysql.com/doc/refman/5.1/en/mysql

I wouldn't be so hard on php for the mysql_* functions; they're wrappers around the C functions of the same names: http://dev.mysql.com/doc/refman/5.1/en/mysql-escape-string.html http://dev.mysql.com/doc/refman/5.1/en/mysql-escape-string.h...