[HELP] Making a default page appear

[FatDank]

Hi all. Can someone help me please. Below is the code I have.

 

What I want is instead of having to go index.php?page=home

I just want to go to the root folder so say example.com/ and it will display what ?page=home is.

 

So just to clarify;

 

I want this:  example.com/index.php?page=home

To be this: example.com

 

<?php 
if ($_GET['page'] == "home"){
   include 'status.php';
}else if ($_GET['page'] == "todays"){
   include("todays.php");
}else{
   // . . .
}
?>

[mgoodman]

You could do this:

 

$page = (isset($_GET['page'])) ?: 'home';

 

That will only work with PHP 5.3+ though, so if you are using something lower than that you would have to do this:

 

$page = (isset($_GET['page'])) ? $_GET['page'] : 'home';

 

 

After that you just use $page instead of $_GET['page'] in your if statements:

 

$page = (isset($_GET['page'])) ?: 'home';

if ($page == 'home') {
    // include home page
}
if ($page == 'someotherpage') {
    // include some other page
}

 

 

In case you don't know, ? : is called a ternary operator. It's basically like a mini if statement. It does the same thing as this if statement:

if (isset($_GET['page'])) {
    $page = $_GET['page'];
} else {
    $page = 'home';
}

[WebStyles]

Since your $_GET['page'] variable has the same name as the files, here's a little variation that will handle any page name:

<?php
$page = isset($_GET['page']) && $_GET['page'] != '' ? $_GET['page'] : 'home';
include_once($page.'.php');
?>

[mgoodman]

That's extremely insecure WebStyles. An attacker could use that to include PHP scripts located pretty much anywhere on the server. (http://yourserver.com/index.php?page=../someotherfile)

[Andy-H]

No they couldn't his includes are hardcoded...

[Andy-H]

Personally I'd use a white list array ad do it this way:

 

 

$page      = isset($_GET['page']) ? strtolower($_GET['page']) : 'home';


$whiteList = array('home','about','contact');


if ( in_array($page, $whiteList) )
{
   include $page . '.php';
}

You could also do:

switch($_GET['page'])
{
   case 'about':
      include 'about.php';
   break;
   case 'contact':
      include 'contact.php';
   break;
   default:
      include 'home.php';
   break;
}

 

[mgoodman]

@Andy, I was talking about WebStyle's code, not FatDank's code. FatDank's code is fine, but WebStyle's certainly is not.

[Andy-H]

My bad, sorry mate