More than two years ago, I wrote a scathing, obscenity-filled tirade about WordPress's misuse of addslashes() to escape user-supplied strings used in SQL queries.
Lots of people posted comments. Some said I was being pedantic, some said I was downright wrong, and one person linked to a diff showing a fix that was supposedly going to be in the next release.
Apparently they never got around to releasing that fix.
Comments
You turned me off from Wordpress...
I must say, your Tirade did cause me (in part) to give up using WordPress, mainly for the same reasons you did.
If only a very talented coder would release their blogging engine, then perhaps people would have an alternative. ;P
Re: You turned me off from Wordpress...
cough, cough
Real Escape String?
addslashes() is so dangerous. Rumor had it not too long ago, one fateful (ostracized) core developer was working on a Taint mode for PHP. Link pn PHP patch for taint mode while the previous link is not stable enough, at least people are working towards getting "you did something really bad" support.