[Dean C]

I can't stress this enough but ALWAYS addslashes any data that will be going into your database, where the input should be a string. Intval it if it's a number.

So the row Colin gave you should be:

PHP Code:

$row = $DB_site->query_first("SELECT * FROM smallville_cast WHERE id='" . addslashes($_GET[bio]) . "'");