title: in php can an sql injection possibly make it through is_numeric function?
body: <p>could i safely assume (if i'm just GETting an id number) that is_numeric is good enough to thwart sql injection attacks? or is there sql injection methods that can pass through is_numeric? </p>