flashback

<?php if ($_REQUEST['id'] == "") {   include "news.html"; } else {   include $_REQUEST['id'].".html"; } ?> how do I secure this code so people can't load pages outside from my server some guy tried to r57.txt me and pulled my info up.. thanks

jesus you're a freaking genius thanks for the help, everyone i would send you all cookies, but i have a meeting to go to what was the problem, btw? (ill read your response when i return)

http://www.foxyones.net/ad.php i dont understand the configs looking at it

with adding the code you said it says; Warning: main(.html): failed to open stream: No such file or directory in /home/foxyones/public_html/index.php on line 187 Warning: main(): Failed opening '.html' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/foxyones/public_html/index.php on line 187

it made a difference now when i click a link, it actually takes me to a different page but its an error page still, we're making progress

my host's IonCube went down a day ago... i have no idea what it is, but i think it has something to do with php protection could that in any way effect my pages?

here's the index.php code in the desired content area: <?php if ($id == "") {   include "news.html"; } else {   include "$id.html"; } ?> anything wrong in that?

it worked well like two days ago i rather have those pages inside the content area, though x()

my site's coded into php / anyway, whenever I click a link, nothing happens, except the index.php refreshes with the news.html.. http://www.foxyones.net/ Click a link and you'll see.. does anyone know the problem / know how I can fix it / or anything valuable to the prob? it'll be greatly appreciated!