php include file not found error

Question

I have a question. I have this script

<?php
$GetPage= "index";
if((isset($_GET["page"])==true) && ($_GET["page"] != "")){
$GetPage = $_GET["page"];
}
?>

But I search on stackoverflow and google. But I can't find it. I want to include a error page when php can't find the file. How can I do that? I'm jut a starter with php.

Ow almost forgoten. I use this to include a part of my site:

<?php include ("include/$GetPage.php"); ?>

Thanks for reading !

Are you redundant to write index.php straight away in your include syntax? — Mr. Alien
– Mr. Alien, Commented May 6, 2013 at 17:14
do NOT do this. This is a hideously BAD security issue. A malicious user can include ANY file on your system for which they know the path. e.g. consider http://example.com?page=../../../../../../../etc/passwd — Marc B
– Marc B, Commented May 6, 2013 at 17:14
@Mr.Alien The first part of my question (the get script) is in my header. The ohter is lower in the file. I only use a index.php If thats what you mean ? — Tom
– Tom, Commented May 6, 2013 at 17:25

Matt Clark · Accepted Answer · 2013-05-06 17:27:37Z

1

<?php

//file_exists will eliminate the need for any of your other checks.
if(file_exists($_GET["page"])){
    //Set the page to be loaded if it is found on the server
    $GetPage = $_GET["page"];
}else{
    //Show the user a 404 error message
    header("HTTP/1.0 404 Not Found");
    //OR
    //Set the page to be loaded as your custom error page
    $GetPage = "my_error_page.php";
}

//Include the page
include $GetPage;

?>

Are you looking for a 404 redirect? Or just load a custom error page into the document? Select the above based on what you wish to do.

edited May 6, 2013 at 17:27

answered May 6, 2013 at 17:18

Matt Clark

28.7k20 gold badges78 silver badges126 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Tom Over a year ago

Thanks for your reply. This is a good begin. But the script I have include when i don't use the get function a file. That is something that I need for this site. But I'm a beginner and someone helpt me with the script i posted. But it needs a small update.

Matt Clark Over a year ago

As stated by @CooPer, you should also escape the passed variable to prevent any kind of injection.

Matt Clark Over a year ago

Were you able to accomplish what you were looking to do?

Mamuz · Accepted Answer · 2013-05-06 17:15:51Z

0

$GetPage = $_GET["page"];  // validate string!!  
if (!file_exists('include/' . $GetPage . '.php')) {
    $GetPage = 'errorPage';
}

answered May 6, 2013 at 17:15

Mamuz

1,72012 silver badges14 bronze badges

1 Comment

Tom Over a year ago

Thanks for your quick reply! But it forgot to post something. I use the $getpage to include my - home - page. The ohter part i use to include the files. When i make a typo or a user i get a php error like this: Warning: include(include/about0.php) [function.include]: failed to open stream: No such file or directory in /home/tombalf/domains/tombalfoort.com/public_html/index.php on line 59 I dont want that php error but a error that i made.

Ali Akbar Azizi · Accepted Answer · 2013-05-06 17:18:38Z

0

first check file is in folder (for injection) , ($file is full path of file.)

$path = "include";//your include folder path
if ( substr(realpath($file) , 0,strlen($path)) != $path || is_dir($file))
        //error file not found

second check file is exist or not

if (!file_exists($file))
//error

answered May 6, 2013 at 17:18

Ali Akbar Azizi

3,5654 gold badges31 silver badges50 bronze badges

Collectives™ on Stack Overflow

php include file not found error

3 Answers 3

3 Comments

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related