Yes that's probably, as I just mentioned, because you don't close your line 9 with a semicolon (";"). Try removing the semicolon from inside your quotes in the following line:$sql="select image from images where id='$_GET[id]';";
Which would make it become:$sql="select image from images where id='$_GET[id]'";
Then add the mysql_real_escape_string() functionality, like this:$sql="select image from images where id='" . mysql_real_escape_string($_GET[id]) . "'";
And then place a semicolon at the end of the following line:$row = mysql_fetch_array($result)
Which would make it become:$row = mysql_fetch_array($result);