Remove SQL injection

inside/file.php

@@ -7,6 +7,9 @@ $conn =& DB_connect();
 
 $id = $_GET['id'];
 
+if (!preg_match('/^\d+$/', $id))
+	die("That's not an id");
+
 $nodelist = array(); 
 
 // Pull file meta-data   
@@ -56,4 +59,4 @@ for ($i = 0 ; $i < count($nodelist) ; $i++) {
   }
 } 
 
-?>
+?>