[RedTyger]

You would use something like

SELECT *
FROM yourdb
WHERE id='" . $_REQUEST['id'] . ''

In this case I'd also use strlen and is_numeric to check that it's only a number and it's very short character sequence being requested, or some other failsafing of your choice. Note the use of REQUEST and not GET, when using vBulletin you should always use REQUEST and not GET.

Originally Posted by harmor19

$_REQUEST can be used as both $_POST and $_GET

That's not strictly speaking true, $_REQUEST is a combination of both. It's not a case of "can be used" as you don't have a choice.