Veilig programmeren (PHP)

WHERE id = '" . mysql_real_escape_string($id) . "'

WHERE id = " . (int) $id . "

function removeMagicQuotes() {
global $_POST, $_GET, $_COOKIE;

if (get_magic_quotes_gpc()) {
function stripslashes_deep($value) {
$value = is_array($value) ? array_map('stripslashes_deep', $value) : stripslashes($value);
return $value;
}
$_POST = array_map('stripslashes_deep', $_POST);
$_GET = array_map('stripslashes_deep', $_GET);
$_COOKIE = array_map('stripslashes_deep', $_COOKIE);
}
}

$pagina = $_GET['pagina']; // pakt de variabelen

$pagina = strtolower($pagina); // zet $pagina om in kleine letters
$pagina = str_replace("***","http:",$pagina); // vervangt http: voor ***
$pagina = str_replace("***","www.",$pagina); // vervangt www. voor ***

include($pagina . '.php'); // include variabelen + .php