include('include/mysql.inc.php'); error_reporting(0); $sql='SELECT* FROM photogallery where photogallery_id!=0 ORDER BY photogallery_data DESC LIMIT 0,1'; $dati=mysql_query($sql); $array=mysql_fetch_array($dati); $id=$array['photogallery_id']; if(isset($_REQUEST['id']) && is_numeric($_REQUEST['id']) && strlen($_REQUEST['id'])<10) {$id=mysql_real_escape_string($_REQUEST['id']);} ?>