Securing the INCLUDE again external URL

[Guffi]

Hi

The PHP code is like this in the index-file:

include($id);

How can I secure it, so $id does not contaion an external link (which could do some harm)
I have tried this: if (stristr($id, 'http') == TRUE) { exit("Hacking - STOP!!"); }

But this test only work in my brower and does NOT stop from phishing :-(

Can someone please help me out here !!??

[trq]

[code]
<?php
  if (file_exists($id)) {
    include $id;
  }
?>[/code]

[utexas_pjm]

[code]
$validIncludes = ('modFoo.php', 'modBar.php');

if (in_array($id, $validIncludes)) {
    include $id;
}
[/code]

Best,

Patrick

[trq]

Actually, thinking about it, my code would break if url wrappers are on, sorry.