note 45977 deleted from function.mysql-query by cece
| From: | cece@php.net | Date: | Sun, 14 Nov 2004 13:13:57 +0000 |
| Subject: | note 45977 deleted from function.mysql-query by cece | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-80497@lists.php.net to get a copy of this message | ||
Note Submitter: joakimar at c dot dk
----
An easier way to make sure a number is actually a number and not a malicious string, simply do
($_GET['id']+0). This way it will always be a number, which cannot harm your database...