<?php include('db.php'); $_GET = mysqli_real_escape_array($_GET); if ($_GET['id'] && $_GET['thumb']) { dbQuery("UPDATE content SET main_thumb = '$_GET[thumb]' WHERE record_num = '" . (int) $_GET['id'] . "'"); } ?>