• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!

[PHP] Secure the script

Kavvson

Gdy boli cie glowa wez
Joined
Jun 25, 2008
Messages
1,177
Reaction score
72
Location
Poland
I wrote a simple script. Location core.php

PHP:
function secure_page()
{
	switch ($_GET['page'])
	{
		case 'showcharacter':break;
		case 'error': break;
		case 'news': break;
		case 'home'; break;
		default: echo "<br>Security Hint! Access Denied - You are not allowed to view this page."; break;
	}
}

Index.php

PHP:
<?php
$page = ((isset($_GET['page']) && $_GET['page'] != '') ? $_GET['page'] : 'home');
$page=(preg_match('/(\.\.|\/)/i',$page)?'home':$page);
$page = preg_replace('/[^a-zA-Z0-9 \._-]/','',$page);
$page = (file_exists('./pages/'.$page.'.php') ? $page : 'error');
include('./pages/'.$page.'.php');
secure_page();
?>

Is this secure?
 
Back
Top