.
*/
$contentpath = $_SERVER['DOCUMENT_ROOT'] . "/text/" . $_SERVER['REQUEST_URI'];
if ( is_dir($contentpath) == TRUE )
$contentpath .= 'index.php';
/* Sanitise */
if (preg_match ( '/\.\./', $contentpath ) || /* don't go up the filesystem */
preg_match ( '/[\'\"]/', $contentpath )|| /* string terminators */
preg_match ( '/\\\0/', $contentpath ) ) /* null bytes */
{
header('HTTP/1.0 500 Internal Error');
echo "Error
";
exit (0);
}
if ( ! is_file($contentpath) )
{
header('HTTP/1.0 404 Not Found');
echo "Not Found
";
exit (0);
}
include($_SERVER['DOCUMENT_ROOT'] . "/includes/header.php");
include($contentpath);
xhtml_header($title);
print($body);
include($_SERVER['DOCUMENT_ROOT'] . "/includes/footer.php");
page_footer($contentpath);
?>