Help with PHP GET

[radian]

Can any one help me with the code below? Would it be possible to stop directory transversals and only allow page requests from the pages directory?

 

So e.g. a user won't be able to change directory into the admin folder.

<?php

$p = $_GET['p'];
if ( !empty($p) && file_exists('./pages/' . $p . '.php') && stristr( $p, '.' ) == False ) )
{
   $file = './pages/' . $p . '.php';
}
else
{
   $file = './pages/default.php';
}

include $file;
?> 

[marcus]

You could just use an array

 

$pages = array('goat','cheese','narnia','etc');
if(in_array($p,$pages)){ ....

[radian]

Now why didn't I think of that.

 

Thanks Very Much!

 

Radian