include help please!

treyb · 03-10-2008, 08:11 PM

Ok, Im using

PHP Code:

  <?php if (empty($page)) {

$page = "home.php"; 

}

if (file_exists("$page")) {

  include("$page");

} else {

  echo "<b>404</b> File not found.<br> We are sorry, the requested file cannot be found on our server.";

}

?>

And I try to type in my browser site.com/index.php?page=test.php and the page does not change to the other pages information...

xrvel · 03-10-2008, 08:38 PM

Actually your method does not really safe.
Lets modify it

PHP Code:

  <?php

$page = $_GET['page'];

$page = preg_replace('/([^a-z0-9\-\_]+)/i', '', $page);// remove unwanted char(s)

if (empty($page)) {

   $page = 'home'; 

}

$page .= '.php';// it must be a PHP file

if (file_exists("$page")) {

  include("$page");

} else {

  echo "<b>404</b> File not found.<br> We are sorry, the requested file cannot be found on our server.";

}

?>

treyb · 03-10-2008, 08:50 PM

thanks a million rep added!

xrvel · 03-10-2008, 08:56 PM

Almost forget,
use "site.com/index.php?page=test" instead of "site.com/index.php?page=test.php"

Good luck,
- Kurniawan.

treyb · 03-10-2008, 09:16 PM

lol i almost asked but then i thought about it and realized i was stupid for not noticing at the begining lol but thank goodness for trial and error lmao

03-10-2008, 08:11 PM	#1 (permalink)
treyb DixieTalk.com Join Date: Jan 2008 Posts: 190 0.82 NP$ (Donate)	include help please! Ok, Im using PHP Code: `<?php if (empty($page)) { $page = "home.php"; } if (file_exists("$page")) { include("$page"); } else { echo "<b>404</b> File not found.<br> We are sorry, the requested file cannot be found on our server."; } ?>` And I try to type in my browser site.com/index.php?page=test.php and the page does not change to the other pages information...

03-10-2008, 08:38 PM	#2 (permalink)
xrvel i love automation Join Date: Nov 2007 Posts: 1,409 987.78 NP$ (Donate)	Actually your method does not really safe. Lets modify it PHP Code: `<?php $page = $_GET['page']; $page = preg_replace('/([^a-z0-9\-\_]+)/i', '', $page);// remove unwanted char(s) if (empty($page)) { $page = 'home'; } $page .= '.php';// it must be a PHP file if (file_exists("$page")) { include("$page"); } else { echo "<b>404</b> File not found.<br> We are sorry, the requested file cannot be found on our server."; } ?>` __________________ Xrvel \| Various online tools \| Free Proxy List \| Hidden Proxy Partai Golkar \| Noomle works : Las Vegas Airfare

03-10-2008, 08:56 PM	#4 (permalink)
xrvel i love automation Join Date: Nov 2007 Posts: 1,409 987.78 NP$ (Donate)	Almost forget, use "site.com/index.php?page=test" instead of "site.com/index.php?page=test.php" Good luck, - Kurniawan. __________________ Xrvel \| Various online tools \| Free Proxy List \| Hidden Proxy Partai Golkar \| Noomle works : Las Vegas Airfare

03-10-2008, 08:50 PM	#3 (permalink)
treyb DixieTalk.com Join Date: Jan 2008 Posts: 190 0.82 NP$ (Donate)	thanks a million rep added!

03-10-2008, 09:16 PM	#5 (permalink)
treyb DixieTalk.com Join Date: Jan 2008 Posts: 190 0.82 NP$ (Donate)	lol i almost asked but then i thought about it and realized i was stupid for not noticing at the begining lol but thank goodness for trial and error lmao

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)