colshrapnel
Joined 10 years ago
Joined 10 years ago
[1] https://en.wikipedia.org/wiki/Human_echolocation#Ben_Underwo...
- it is not "input" must be treated, but, so to say - output. It's the destination that matters, not the source. By the time you get the input, you have no idea how and where it will be used. You can tell it right before the output (or, rather, better to call it "use") only. Say, you've got some input that didn't pass the verification and you will have to display it back in the HTML form. And if you already "escaped" it for SQL, it will be malformed. And vice-versa. Moreover, any data must be formatted properly before use, not just something that you tagged as "input".
- the word treated above is for a reason. Because the term "escaping" suggests some certain routine in PHP, which is the actual reason for numerous SQL injections.
And I visit my facebook account weekly, via desktop browser, only to see what's up with my friends hanging up there.
I very seldom do likes, as I know that my likes could show up in my friends' feeds. There are NO notifications from social network or media on my phone. I call it "information hygiene".
And yes, like others mentioned, I've got A LOT of spare time for books, hobbies, movies etc.
So, it's apparently a good reason to hate, but by no means a reason not to use PHP.
The front page for Teams boasts it's better than your "stale wikis and lost emails" but in reality there are much more stale answers on SO than anywhere else.