$pagename=security_clean($_GET['page']); $query = "SELECT * FROM pages WHERE name = '".$pagename."' ORDER BY page_id"; $result = mysql_query($query); $num=mysql_numrows($result); $i=0; while ($i < $num) { $content=mysql_result($result,$i,"content"); $issqlpage=mysql_result($result,$i,"issqlpage"); if($issqlpage == "0") { if(isset($_GET['page'])) if(file_exists($_GET['page'].".php") && $_GET['page'] != "index" ) include htmlspecialchars($_GET['page'] . ".php"); }else { if(!$result || !mysql_num_rows($result)) { echo "Page not found in database."; }else { if(!isset($_GET['page'])) echo "$content"; $i++; } } }