PHP: INCLUDE zum dynamischen Einfügen von Inhalten

	<!-- Content Area -->
	<div id=content>
		<?php
			// settings
			$contentDir = content;
			$contentExt = html;
			$defaultContent = news;
			// get URL parameter
			$content = $_GET{content};
			// check whether parameter is empty
			if ($content == ) {
				// set default content
				$content = $defaultContent;
			} else {
				// make sure no parent directory can be accessed
				$content = str_replace(../, , $content); // DEBUG: not safe? (e.g. ....////) => disallow all slashes?
			}
			// check whether respective file exists
			$contentSource = $contentDir . / . $content. . . $contentExt;
			if (is_file($contentSource)) {
				// read content from file
				include($contentSource);
			} else {
				echo Bad parameter: Error reading content source.;
			}
		?>
	</div>

	<div id=content>
		<?php
			// settings
			$contentDir = content;
			$contentExt = html;
			$contentName = news; // default content
			// get URL parameter (content)
			if (!empty($_GET[content])) {
			  $contentName = basename($_GET['content']); // ensures that no directories can be accessed
			}
			// check whether respective file exists
			$contentSource = $contentDir . / . $contentName . . . $contentExt;
			if (is_file($contentSource)) {
				// transclude content
				include($contentSource);
			} else {
				echo Bad parameter: Error reading content source.;
			}
		?>
	</div>