Help to avoid sql injection attack

[eluser]Unknown[/eluser]
would you please guide me to secure my query



here is the query

$id=$_GET['id'];
$sql="select title,picture,news from sport where id='$id'";
$result=mysql_query($sql,$db);

do u think its secure now

$id = mysql_real_escape_string($_GET['id']);