<? $id=$_GET['id']; If(eregi("^[A-Za-z0-9_-]+$",$id) AND file_exists("./pagecontent/".$id.".php")) { include("./pagecontent/".$id.".php"); } Else { echo "file dosen't exist"; } ?>