    public static function activate($id){
        $act = Db::query(
            sprintf("UPDATE `user` SET `status` = '1' WHERE `id` = '%d'", 
                Typo::int($id)
                )
            );
        if($act){
            return true;
        }else{
            return false;
        }
    }

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.