How can I secure this little.

[eluser]phantom-a[/eluser]
Thanks Frank that works. Except for that ob_end_clean() it makes a PHP error occur.

What about if someon inserts a letter into the ID? like hits/1a
It throws instead a SQL error.

A Database Error Occurred
Error Number: 1054
Unknown column '1a' in 'where clause'
SELECT `url` FROM `links` WHERE `id`=1a