> You can also escape the scans by using variable names that start with an underscore
So people who use
"WHERE id=" . $_GET['id']
So people who use
"WHERE id=" . $_GET['id']