'; exit(0); } // redirect if file does not exist // note: prefix on file name prevents user from displaying any arbitrary file if (!@include('inc/content/sarbanesoxley/sox-'.$_GET['name'].'-'.$_GET['page'].'.php')) { echo 'Invalid Sarbanes Oxley article.'; echo ''; exit(0); } ?>