I'll take the blame, I shortened the statements maybe a bit too much, assuming the references would work. But they were explained well by the other replies.
I was learning in the 90s from lessons on AOL how to sanitize inputs and salt passwords along with HTML 1.0. It baffles me how corporations let stupid things happen now.