Bahagian 2 - Mengelak Serangan Suntikan SQL

<?php

$mysqli = new mysqli("localhost", "my_user", "my_password", "world");

$id = $mysqli->real_escape_string( $_GET['id'] );

$Q = "SELECT * FROM users WHERE id='$id'";

?>