require_once($_SERVER['DOCUMENT_ROOT']."/global.php5"); ob_start(); $page = $_GET['page']; if(!$page){ $page = "index"; } // make sure page is clean of anything naughty if(strpos($page,"://")){ exit("No external pages"); } if(!file_exists($_SERVER['DOCUMENT_ROOT']."/pages/".$page.".php5")){ // should redirect 404 here. exit("Page not found"); } if($_GET['return_to']){ $return_to = urldecode($_GET['return_to']); } $cand = new cand(); require_once('cand_secure.php5'); // prepare search components if($page=='search'){ $search_data = $_GET; $_SESSION['last_search_data'] = $search_data; } if(!$search_data && $_SESSION['last_search_data']){ $search_data = $_SESSION['last_search_data']; } ?>