It's 2019 and PHP is *still* teaching people to concatenate SQL and vaguely-sanitized user input instead of using prepared statements. http://php.net/manual/en/mysqli.examples-basic.php … They got rid of the mysql module... only to teach people to use mysqli the same way. This is why SQLi isn't going away.
-
If you do stick with PHP, you're going to have to either quickly develop a sense of what's good vs bad advice (which is probably really difficult for a newbie), or accept that you're going to be accidentally making bad habits that you're going to have to unlearn later.
Other languages like Python 3 tend to have a higher baseline quality of examples on the web, and are better designed overall. I would recommend that. OTOH, if you want to develop on top of an existing PHP framework, then yeah, that makes sense.
