Mr. Abdu Jan

if(isset($_GET['name'])) {$name = htmlspecialchars(mysql_real_escape_string($_GET['name']));}

$q = mysql_query("SELECT * FROM news WHERE link = '".$name."';