External PHP File Links

OPTAdmin

Okay, I'm new to the board, so bear with me.

What I want to do is have links to a certain template page. But, the tough part is that I want the links to send an include() command that is linking to a different external PHP for each link? I hope that makes sense to someone.

To simplify:
I want each link to go to a template page, but somehow link to an external PHP file.

Any help, please? Thanks!

devinemke

link to the template file and pass a GET varibale to specify which other file to include in the template:

<a href="template.php?file=some_other_file">link</a>

warning! if you are going to do this be sure to properly validate the GET variable. perhaps store a list of allowable variables in an array and use in_array() to check.

OPTAdmin

Originally posted by devinemke
link to the template file and pass a GET varibale to specify which other file to include in the template:

I'm close to illiterate when it comes to PHP. A little more description, please? Thanks.

move3rd

in template.php

<?

include($_GET['file']);

?>

Now you need to find a way to check that the file being inlcuded is valid. If you dont your leaving your server wide open to hackers.

yuordomain.com/template.php?file=http://any_file_on_any_server_can_now_be_parsed_on_your_server_by_anyone.php

OPTAdmin

Now you need to find a way to check that the file being inlcuded is valid. If you dont your leaving your server wide open to hackers.

Any idea about where I could find out how to do this?

move3rd

You need to read up on how to use arrays.

http://uk2.php.net/manual/en/function.in-array.php
http://uk2.php.net/manual/en/ref.array.php