i want to protect the database while sending the sql strings. i want to learn your opinions about that position. there are two ways. first way is check the value (which is coming via url) with is_numeric. the other way is to use addslashes. but which better?
1- use is_numeric or
2- use addlslashes
before send the sql to the database?