WORKSHOP 2008 INFO
  // PHP CODE

  $string = "";

  if ( isset ( $_GET['m'] ) )
   {
     $m = $_GET['m'];
     $m = str_replace ( "..", "", $m );
     $string = @file_get_contents ( $m . ".html" );
   }

Remote File Inclusion (RFI) for WorkShop 2008