1:57 AM
@JackJohansson if PDO did have its own built in functions, that still doesn't meant you can ignore filter_input
the very idea that you'd allow unsanitised, unvalidated data in to your application untouched all the way to the very last hurdle where you hand it off to a core API you didn't write, and expect that API to do all the security out of the box, leaves lots of questions
another way of thinking it, is if all the regulation on farming, packaging, retail, was all abolished. Nobody checked anything until the food was on a fork just about to pass your lips, at which point they relied on you tasting anything that might have gone wrong like salmonella, industrial waste in the stream by the farm, etc
so even if PDO did all of that and then some, that doesn't mean you can rely on just PDO for it
besides, there's no way to catch logic bugs. -1 and 0 are perfectly valid integers, so I'd like to buy -100 of that product, and null of that one
