$strquery = "SELECT * FROM `topics` WHERE `id`='%d'"; $query = sprintf($strquery,mysql_real_escape_string($_GET[id]));