rendered paste body $pagename=security_clean($_GET['page']);
$query = "SELECT * FROM pages WHERE name = '".$pagename."' ORDER BY page_id";
$result = mysql_query($query);
$num=mysql_numrows($result);
$i=0;
while ($i < $num) {
$content=mysql_result($result,$i,"content");
$issqlpage=mysql_result($result,$i,"issqlpage");
if($issqlpage == "0") {
if(isset($_GET['page']))
if(file_exists($_GET['page'].".php") && $_GET['page'] != "index" )
include htmlspecialchars($_GET['page'] . ".php");
}else {
if(!$result || !mysql_num_rows($result)) {
echo "Page not found in database.";
}else {
if(!isset($_GET['page']))
echo "$content";
$i++;
}
}
}