Sindbad~EG File Manager
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<html>
<!-- DW6 -->
<?php include ('include/head.php'); ?>
<body onmousemove="closesubnav(event);">
<?php include ('include/body.php'); ?>
<div class="style1" id="pageName">
<p></p>
<h2>MathXpert: software to help you learn mathematics.</h2>
<img alt="MathXpert logo" src="TransparentMathXpertLogo.gif" height="50" width="118">
</div>
<div class="style1" id="content">
<table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111" width="96%" id="AutoNumber1">
<tr>
<td>
<?php
// Need to match the passed URL parameter...
// hackers were putting '../../../../etc/passwd' and had visability to the whole filesystem
// 7/26/2023, rudy - Rudy Jr :)
if (preg_match('/^[A-Za-z0-9\-]+\.[a-z]{3,4}$/', $_GET['include'])) {
$include = $_GET['include']; // needed on PacWeb server!
} else {
$include = "about.html";
}
include ("include/".$include);
?>
</td>
</tr>
</table>
</div>
<?php include ('include/footer.php'); ?>
</body>
</html>
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists