$p = strtolower($_GET["p"]); if (ereg('[^A-Za-z0-9]', $p)) exit("hack attempt"); if (strlen($p) > 10) exit("invalid query"); if(!$p) $p = "home"; ?>