PHP Include problem

[JMusic]

I am trying to set up a page in my site so that I can put article.php?id=filename and include an article in the layout.

I am really new at php and this is the code I'm trying to use:

<?php include (articles/'echo "$_GET['id']"'); ?>

But it gives me a parse error. How can I fix this?

[devil cat]

It should be more like:

<?php include( "articles/" . $_GET['id'] ); ?>

I hope you do some serious validation on that value before depending on it though.

[arborint]

How about:

<?php
$article = preg_replace('/[^a-zA-Z0-9\_]/', '', $_GET['id']);
include( "articles/{$article}.php" ); // or .html
?>

[Dylan B]

Or:

<?php
$pages = array("page1.php", "page2.php", "page3.php");
if in_array($_GET['id'], $pages)
{
include("articles/" . $_GET['id']);
}
else
{
echo 'Hacking Attempt';
}
?>