Security of simple SQL queries?

[Anon]

Ok, let's take a simple PHP script:

<?php
mysql_connect(localhost,root,pass);
mysql_select_db(db);

$query = mysql_query("SELECT * FROM table WHERE id=$id");
$row = mysql_fetch_array($query);

print $row["name"];
?>

so the script is called, let's say, http://localhost/test/test.php?id=15 ... But what if someone does this calls script like this: http://localhost/test/test.php?id=15;delete%20from%20table; -- will the "second" SQL query get executed? Any ideas on how to prevent this?

[Anon]

Have you tested that? I'm pretty sure this won't work because the mysql_query() function will only run a query at a time, so you'll get an error.

Dario Gomes