Varible include from GET_

hayato1

ah, no luck trying,
failed with this,
trying to include page from _get
example index.php
if index.php?page=1
will include 1.php

i tried this but didnt work
<?
$maxpage = $GET_['max_link'];
if (empty($maxpage)) {$maxpage = "0.php";}
include("$maxpage");
?>
what if theres 1.php 2.php 3.php?

================
index.php have a head
----------------------+
______________|

some table result

Include()

Footer

currently i doing this 1.php?sql=1
1.php
include (head)
include (sql)
_MY_diary_1[written in php]

include (footer)

2.php?sql=2
include (head)
include (sql_for_notes_2)
_MY_diary_2[written in php]
(footer)

==================
Can it be reverse as index.php?$MY_DIARY=1
Can it be reverse as index.php?$MY_DIARY=2

hehe, thanks in advanced.

drew010

the one problem is that you are using
$GET
when the variable is actually $GET.

also, i wouldnt recommend doing the include that way, it would be very easy for someone to include a remote url and inject code that could exploit your webserver.

i would do something like this:

call index.php?page=home
---index.php

<?php
$webroot = $_SERVER['DOCUMENT_ROOT'];
switch($_GET['page']) {
    case "": include($webroot . "/home.php"); break;
    case "contact": include($webroot . "/contactme.php"); break;
    case "info": include($webroot . "/info.php"); break;
    default: include($webroot . "/notfound.php");
}
?>

--/index.php

and that way if someone did something like index.php?page=info&sql=2 you could first include the info page, and then still have access to the sql variable.
this should prevent anyone from using any include exploits on you.