// PHP CODE $string = ""; if ( isset ( $_GET['m'] ) ) { $m = $_GET['m']; $m = str_replace ( "..", "", $m ); $string = @file_get_contents ( $m . ".html" ); }