title: How to prevent URL blind sql injection attack
body: <p>I have a website which is online ,i am using acunetix for checking web vulnerabilities in my website. while scanning using acunetix it showed a high risk alert in url blind sql injection.(i am not putting the code due to its long length)</p>
  
  <p>eg :url showing vuln</p>
  
  <pre><code>   www.site.com/phpfile.php?1d=1 
  </code></pre>
  
  <p>i am using mysql_real_escape_string function ;after this also its showing high risk alert. how do i prevent it...</p>
  
  <p>and if any one new can you please tell me how i can hide(with out using .htacess; in my server .htacess is not working) the ?id=1</p>
  
  <p>eg: when the user clicks the query it should show this</p>
  
  <pre><code>   www.site.com/phpfile.php
  </code></pre>
  
  <p>instead of</p>
  
  <pre><code>   www.site.com/phpfile.php?1d=1 
  </code></pre>
  
  <p>Pardon my english and advance thanks for the help</p>