Posted by Pedro Graca on 10/07/06 01:17

robertcode@gmail.com wrote:
> <?php include '/'.$_GET["directory"].'/articles.php'; ?>

The include file is fetched from the file system.
You are trying to fetch /<QUERYSTRING_DIRECTORY>/articles.php
----------------------- ^

You can either omit the '/' (and make sure the QUERYSTRING_DIRECTORY
exists as a subdirectory of the one the script is running from) or
specify the full path to the articles.php script(s).

<?php
$article_dir = $_GET['directory'];

### You will need to write the `directory_is_valid()` function :)
if (directory_is_valid($article_dir)) {
include 'C:/Apache/htdocs/' . $_GET["directory"] . '/articles.php';
} else {
### For simplicity sake, just exit with an error message
exit('Invalid directory.');
}
?>

--
File not found: (R)esume, (R)etry, (R)erun, (R)eturn, (R)eboot

[Back to original message]