code:


<?php



if(!isset($section))

{

	$section="list_gigs";

}





$section .= ".php";



echo $section;



require 'config.php';

require 'opendb.php';

require 'header.php';

require $section;

require 'footer.php';



?>

quote:

---

Originally posted by James
You've not done a get?

$section = $_GET['section'];

---

quote:

---

Originally posted by MikeLamb
What you did would have worked in older versions of PHP..

---

code:


<?php

require_once('config.php');

require_once('opendb.php');

require_once('header.php');

// gets url.com/file.php?section=bleh

switch ($_GET['section']) {

case "main":

include_once('main.php');

break;

case "example":

include_once('example.php');

break;

default:

include_once('gigs.php);

}

require 'footer.php';

?>

quote:

---

Originally posted by poole
BTW i'm not using the same method as yourself (taking any user input) for security reasons.

---

quote:

---

Originally posted by Ian
Yes - you must must must not append .php to the end of some user input and call that a filename.

FAR safer to say -

if var == main then page == main.php
if var == gigs then page == gigs.php

Either a switch or if you're feeling nifty make an array of strings to test and and array of filenames, in the same order so they share array index.

Then you just foreach through that and set your page address variable out of your filename array.

Hope that is clear enough haha

---