$get = stripslashes($_GET['id']);
while ( $get[0] == '.' || $get[0] == '/' || $get[0] == '\\' ) {
    if ($get[0] == '.'){
    $get = ltrim( $get, '.' );
    }
    if ($get[0] == '/'){
    $get = ltrim( $get, '/' );
    }
    if ($get[0] == '\\'){
    $get = ltrim( $get, '\\' );
    }
}
$fname = "inc/" . $get . ".php";

if ( file_exists( $fname ) ) {
    include( $fname ); 
} else {
    echo "404";
}