Comments by Gilles Migliori (migli) (Top 1 by date)

You're absolutely right, the query is not protected. It's usual on forums and others to give simple code samples this way.

I don't agree about always using parameterized queries. Some others 100% safe solutions exist, for instance PHP filters or variable type declaration