[kh99]

Originally Posted by Preech

I know that this won't work in vbulletin. How should I use this.

You *could* do that in vbulletin, but vbulletin provides functions for "cleaning" the input beofre using it, so you'd use something like this:

$vbulletin->input->clean_gpc('r', 'id', TYPE_UINT);
$id = $vbulletin->GPC['id'];

Also should I put this before or after my query.

What query? It probably doesn't matter, but obviously you need to do it before you use the id value.