Variable in Query?

[eluser]tonanbarbarian[/eluser]
for best speed and security use this

Code:

$query = $this->db->query('SELECT * FROM pages WHERE pageID='.(int)$id);

using single quotes is faster in php because if you use double quotes PHP must search the string for variables to replace which is slower than just concatenating a variable onto the end of the string.
Also casting the variable as an int is the safest thing to do to stop any sort of cross site scripting (i.e. xss)
so even though $this->uri->segment() may do an xss_clean (manual is unclear if this is done or not and I havent checked the code yet) if you cast the variable any malicious value entered will be converted to a number and will not cause any harm

Just my thoughts on best practice