$_GET php security question
<p>Do coding this way pose any security risks?</p>

<pre><code>$test = $_GET['test'];
if($test) { 
$sql = mysql_query("SELECT * FROM tbl WHERE col2 = 'ABC'");
$row ...
}
</code></pre>

<p>Thank you for your guidance</p>
