Защита от SQLi

[Ozka]

Здравейте,
не мога да разбера къде е проблема по кода
какво още трябва да променя за да имам защитен файл.
Този код е за странициране на видео клипове
задавам урл http://link/video.php?page=2
добавям зад него '
http://link/video.php?page=2'

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-16, 16' at line 1

Какво да направя ,чакам вашите отговори
БлагодарЯ!

<?php 
include "settings.php";
mysql_query('set names cp1251');

if(isset($_GET['page']))
  $page = addslashes(htmlspecialchars((int)$_GET['page']));	

else
    $page = 1;
$limit = 16;
$first = ($page-1)*$limit ;

$query = mysql_query("SELECT * FROM `videos` ORDER BY `id` DESC LIMIT $first, $limit") or die(mysql_error());

$counter = 0;
echo '<table>';
while($result = mysql_fetch_assoc($query)) {
    if($counter%4 == 0)
        echo '<tr>';
    echo '<td valign="top" width="25%"><div style="text-align: center;">
	<img src="'.$result['img'].'" alt="'.$result['title'].'" title="'.$result['title'].'" style="border: 1px solid rgb(0, 0, 0); width: 120px; height: 90px;" /><br />
	<a href="video/play/'.$result['id'].'" title="'.$result['title'].'"><b>'.$result['title'].'</b></a>
	</div></td>';
    if($counter%4 == 3)
        echo '</tr>';
    $counter++;
}
echo '</table><br />';

$rows = mysql_query("SELECT * FROM `videos`") or die(mysql_error()); 
$rows= mysql_num_rows($rows);
$number_of_pages = ceil($rows/$limit);
echo '<center>';
if($page != 1)
    echo ' <a href="video.php?page=1">[Първа страница]</a> ';
for($i = 1; $i <= $number_of_pages; $i++) {
    if($i == $page)
        echo ' <strong>['.$i.']</strong> ';
    else
        echo ' <a href="video.php?page='.$i.'">['.$i.']</a> ';
}
if($page != $number_of_pages)
    echo ' <a href="video.php?page='.$number_of_pages.'">[Последна страница]</a> ';
echo '</center>';
?>

 

[vik96]

<?php 
include "settings.php";
mysql_query('set names cp1251');

if(isset($_GET['page']))
  $page = (int) $_GET['page'];     
else
  $page = 1;
  
$page = ( $page < 1 ) ? 1 : $page;
	
$limit = 16;
$first = ($page-1)*$limit ;

$query = mysql_query("SELECT * FROM `videos` ORDER BY `id` DESC LIMIT $first, $limit") or die(mysql_error());

$counter = 0;
echo '<table>';
while($result = mysql_fetch_assoc($query)) {
    if($counter%4 == 0)
        echo '<tr>';
    echo '<td valign="top" width="25%"><div style="text-align: center;">
        <img src="'.$result['img'].'" alt="'.$result['title'].'" title="'.$result['title'].'" style="border: 1px solid rgb(0, 0, 0); width: 120px; height: 90px;" /><br />
        <a href="video/play/'.$result['id'].'" title="'.$result['title'].'"><b>'.$result['title'].'</b></a>
        </div></td>';
    if($counter%4 == 3)
        echo '</tr>';
    $counter++;
}
echo '</table><br />';

$rows = mysql_query("SELECT * FROM `videos`") or die(mysql_error()); 
$rows= mysql_num_rows($rows);
$number_of_pages = ceil($rows/$limit);
echo '<center>';
if($page != 1)
    echo ' <a href="video.php?page=1">[Първа страница]</a> ';
for($i = 1; $i <= $number_of_pages; $i++) {
    if($i == $page)
        echo ' <strong>['.$i.']</strong> ';
    else
        echo ' <a href="video.php?page='.$i.'">['.$i.']</a> ';
}
if($page != $number_of_pages)
    echo ' <a href="video.php?page='.$number_of_pages.'">[Последна страница]</a> ';
echo '</center>';
?>

 

[fcvc_gaming]

<?php
include "settings.php";
mysql_query('set names cp1251');

if(isset($_GET['page']) && $_GET['page'] !=NULL && $_GET['page']>=1)
 { $page = (int) $_GET['page']; }
else
 { $page = 1;}
 
$page = ( $page < 1 ) ? 1 : $page;
   
$limit = 16;
$first = ($page-1)*$limit ;

$query = mysql_query("SELECT * FROM `videos` ORDER BY `id` DESC LIMIT $first, $limit") or die(mysql_error());

$counter = 0;
echo '<table>';
while($result = mysql_fetch_assoc($query)) {
    if($counter%4 == 0)
        echo '<tr>';
    echo '<td valign="top" width="25%"><div style="text-align: center;">
        <img src="'.$result['img'].'" alt="'.$result['title'].'" title="'.$result['title'].'" style="border: 1px solid rgb(0, 0, 0); width: 120px; height: 90px;" /><br />
        <a href="video/play/'.$result['id'].'" title="'.$result['title'].'"><b>'.$result['title'].'</b></a>
        </div></td>';
    if($counter%4 == 3)
        echo '</tr>';
    $counter++;
}
echo '</table><br />';

$rows = mysql_query("SELECT * FROM `videos`") or die(mysql_error());
$rows= mysql_num_rows($rows);
$number_of_pages = ceil($rows/$limit);
echo '<center>';
if($page != 1)
    echo ' <a href="video.php?page=1">[Първа страница]</a> ';
for($i = 1; $i <= $number_of_pages; $i++) {
    if($i == $page)
        echo ' <strong>['.$i.']</strong> ';
    else
        echo ' <a href="video.php?page='.$i.'">['.$i.']</a> ';
}
if($page != $number_of_pages)
    echo ' <a href="video.php?page='.$number_of_pages.'">[Последна страница]</a> ';
echo '</center>';
?>