Help to avoid sql injection attack

[eluser]Bart v B[/eluser]
That can be much simpler
UseActive Records

Code:

function GetData()
{
    $this->db->select('select title,picture,news');
    $this->db->where('id', $_GET['id']);
    $this->db->from('sport');
    
    $query = $this->db->get();
    
    foreach ($q->result() as $row)
    {
        $aData[] = $row;
        
    }
    
    return $aData;
}