Home/ Questions/Q 694903
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-14T02:54:16+00:00

i got this SQL query where post_title taken from $_GET $sql = SELECT ID

  • 0

i got this SQL query where post_title taken from $_GET

$sql = “SELECT ID FROM posts WHERE posts.post_title = ‘5-design-web-colourful'”;

What is the best way to sanitize this and make it more safe ?

EDIT : (as requested) I’m trying to create a plugin that work to hide a particular category (named private) and all of its post for every non-logged guest. i have hook into ‘pre_get_posts’ and ‘posts_selection’ able to control how to show particular posts and category for admin, the member who wrote them, other member, and guest.

The category must be non exist. so it can not be shown on cat archive page in front end.

I know it’s not relatedto the question cause what iask just how to sanitize name / title of a post. nothing more.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Use mysql_real_escape_string, assuming you use MySQL.

    • 0