i am seeing quite alot of advice in these forums that are not very safe.
I know a city guide site is not the kind of place to be hacked but you really need to think about site and database security when using queries.
Most of the advice i have seen on here use straight values obtained from either posts or variables without the necessary escaping or sanitisation. Not very good practice at all...
Devdan,
True a lot of the code here is not safe, however, most people just need a clue how to get things done, and they find it here. If a developer does not make its code safe, it is his problem, not a problem of this community. Everyone should take care of security issues on his website, and not to use the code "as is" from the forum.
Still if a dev does use the code as is, without security in mind, maybe he does not understand the code, so it is just his problem.