Well, it should only be run via a mod_rewrite rule, but it's easy enough to double check:

if ($ENV{'QUERY_STRING'} !~ /^\d{,10}$/) {
    die 'Invalid ID';
}
[download]