Help to avoid sql injection attack

[eluser]CodeIgniteMe[/eluser]
[quote author="Bart v B" date="1312855066"]

Code:

function GetData()
{
    $this->db->select('select title,picture,news');
    $this->db->where('id', $_GET['id']);
    
    $query = $this->db->get('sport');
    
    return $query->result();
}

[/quote]

and one more thing to clean up.
You don't need to include the select keyword in the statement

Code:

$this->db->select('select title,picture,news');

should be

Code:

$this->db->select('title,picture,news');