is usingI use intval() correct, if I am using $_POST value in query for integers such as ids? i know it does not always convert to the right number depending on what string is supplied but the case is not allowing random strings to the query, right? Furthermore limiting the value to integer. Anyone can still change the string send from url/form but is intval good enough to be used like that?simple cases although (int) apparently eats less resources
EXAMPLE: "SELECT * FROM categories WHERE category_id = ".intval($_POST['id'])." LIMIT 1"
thank you in advance if anyone comments on this, i could not post it as a comment unfortunately
T