Mysql Select - security question

[bugzy]

Newbie question..

 

Right now I only have mysql_real_escape_string to my update and delete statements

 

I wonder if select statement is still prone to a sql attack?

 

For example like this..

 

Select * from table_sample

 

It isn't part of the form. How would I able to secure it?

[fenway]

Any query that doesn't accept user input isn't prone to sql injection attacks -- there's nothing to inject.

[bugzy]

Thanks fenway..