SQL injection -- 2
Budget: ₹750 – ₹1,250 INR
I need the above code to be written in Parameterized queries to avoid the SQL injection-
$query = "SELECT * FROM listings WHERE id = ".$_GET['id'];
$result = mysql_query($query);
$query = "SELECT * FROM listings WHERE id = ".$_GET['id'];
$result = mysql_query($query);