x10Hosting Member
Hey, I ned some help with this:
Where do I put it. I am trying to get it to work on this site: http://www.cascades.exofire.net i would also like it to be a=name instead of p=name.PHP Code:if(isset($_GET['p']))
{
$p = $_GET['p'];
include($p.'.php');
}
Help please!
``Frodo6695``
Last edited by CascadesAdmin; 07-28-2007 at 01:26 PM.
x10 Elder
For it to be 'a' and not 'p' then simply use
Although I must say that this is a very insecure way of accessing a page.As someone could include ANY PHP file and not just the ones you want them to.PHP Code:if(isset($_GET['a']))
{
$a = $_GET['a'];
include($a.'.php');
}
As for where you put it, could you post the source of your page (the server is down atm).
Lambada - the former Account Manager (before I resigned)
x10Hosting Member
Which page?
the home one?
and do you have a more secure way of doing this?HTML Code:<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta http-equiv="Content-Style-Type" content="text/css" /> <title>Cascades Band</title> <link href="style.css" rel="stylesheet" type="text/css" /> <link rel="shortcut icon" href="favicon.ico" /> </head> <body> <div id="wrapper"> <ul id="nav"> <li><a href="http://www.cascades.exofire.net/index.php?a=idx">Home</a></li> <li><a href="http://www.cascades.exofire.net/index.php?a=band">Band</a></li> <li><a href="http://www.cascades.exofire.net/index.php?a=shows">Shows</a></li> <li><a href="http://www.cascades.exofire.net/index.php?a=contact">Contact</a></li> <li><a href="http://www.cascades.exofire.net/index.php?a=extras">Extras</a></li> </ul> <h1><a href="/"><img src="images/logo1.gif" width="118" height="25" alt="Cascades Band" /></a></h1> <div id="body"> <div id="bodyi"> <div id="bodyj"> <div id="sidebar"> <div class="content"> <h2>Info</h2> <p>This site is currently under construction.</p> <p class="readmore"><a href="http://www.freewebsitetemplates.com">Read More</a></p> </div> <div class="divider"></div> <div class="content"> <h2><a href=http://news.cascades.exofire.net/show_news.php>Latest News & Updates</a></h2> <p class="readmore"><a href="http://news.cascades.exofire.net/rss.php">Read More</a></p> </div> </div> <div id="content"> <img src="images/construction2.jpg" width="346" height="234" alt="Under Construction" /> <div class="content"> <h2>Latest Album</h2> <p>No Albums Yet, Site under Construction.</p> <p class="readmore"><a href="http://www.freewebsitetemplates.com">Read More</a></p> <div class="divider"></div> <h2>Hit List</h2> <table summary="track downloads" border="0" cellspacing="0"> <tr> <th width="55%">Tracks</th> <th>Album</th> <th class="hidden">Dowload links</th> </tr> <tr> <td>None</td> <td>None</td> <td class="download"><a href="http://www.freewebsitetemplates.com">Download</a></td> </tr> <tr> <td>None</td> <td>None</td> <td class="download"><a href="http://www.freewebsitetemplates.com">Download</a></td> </tr> <tr> <td>None</td> <td>None</td> <td class="download"><a href="http://www.freewebsitetemplates.com">Download</a></td> </tr> <tr> <td>None</td> <td>None</td> <td class="download"><a href="http://www.freewebsitetemplates.com">Download</a></td> </tr> </table> <p class="readmore"><a href="http://www.freewebsitetemplates.com">More Tracks</a></p> </div> </div> <div class="clear"></div> </div> </div> </div> <p id="power">Powered by <a href="http://www.freewebsitetemplates.com">Free Website Templates</a></p> </div> </body> </html>
Edit:
I am making a new design I have the template up for now.
Last edited by CascadesAdmin; 07-30-2007 at 11:53 AM. Reason: Automerged Doublepost
VPS Migration Professional
For an example, someone could include a PHP file that isn't even on your site by making a = http://x10hosting.com/includeFile
Your site will now include http://x10hosting.com/includeFile.php (Doesn't exist). You would not want the user to be able to decide which pages to include on your site at all.
x10Hosting Member
how do you secure it?
x10 Spammer
What do you mean by "securing" it?
-Chris Z
Retired Account Manager
VPS Migration Professional
I don't believe it can be secured doing it the way you have it, the way you have it uses GET to allow the user to pass whatever they want to the script.
x10 Elder
Hmm, sounds familiar...2 CascadesAdmin: *sigh* Thats basic php, so if you have questions, check this firstOriginally Posted by Chris Z
Last edited by t2t2t; 07-30-2007 at 02:03 PM.
This post has been marked spam 52 times.
x10Hosting Member
yeah, its not like they have that exact code on the page. and I just asked for help with it...
Lord Of The Keys
Gimme a week (its when i return home) and I will send you an old script I used for that sort of thing. I was told it was secure!
Regards,
Zenax
Posting Permissions
LinkBack URL
About LinkBacks
Reply With Quote
