Not sure how to describe in one line...

[jasondavis]

Basicly I have this in a page

<ul id="tablist">
<li><a class="current" href="">Browse Users</a></li>
<li><a href="">Online Users</a></li>
<li><a href="">New Users</a></li>
<li><a href="search.php">Search Users</a></li>
<li><a href="">Top Rated</a></li>
<li><a href="">Top Refferals</a></li>
</ul> 

class="current" is the important part here

now the way the page is built uses this code

<?
	$folder='templet/';

   if (file_exists($folder.$_GET['searchoption'].'.php') ){
    	 $body_code =$folder.$_GET['searchoption'].'.php'; 
  } else {
        $body_code =$folder.'browse.php'; 
  }
   include($body_code); 
  ?>

Any ideas how I can dispaly the correct current style depending on the page that is loaded?

[alimadzi]

Sure, just add the ' class="current"' to the current page as you build your tablist. I'll need to see the menu code you're using now in order to tell you where to add it.

A more alarming issue though is the use of a raw $_GET variable in the building of a file name that gets pulled from your server. Yikes! The '.php' you tack on the end might save you here, but otherwise somebody could just do something like this...

/?searchoption=../../../../../../etc/passwd

That would be bad... very very bad.

At the very least, you should build an array of possible choices from a database table, compare the $_GET variable to that list, and default to the home page if a match is not found. Never let the user just decide what file gets included. They could start snooping around for a 'reset.php' file or something like that.

[jasondavis]

thanks I changed it to use a switch statement