imagine1 wrote:I know that it can be done by include('file.php'); or require('file.php'); . But this is valnurable to sql injections...
Er.. no, it isn't. How does including files have anything at all to do with SQL injections?
imagine1 wrote:The questions is how can include the 'file.php' in another way. The file 'file.php' contains data encoding in utf8 and i send data through a form and get data by $_GET['field_id']...
Okay, but what does data you send through a form have anything to do with including files? That's one thing I don't understand about your question.