Dynamic Page Content From Links

Snippet Code

This shows how to load a specific file into the page by clicking on a link.

links.php




<a href="links.php?id=1">File 1</a>

<a href="links.php?id=2">File 2</a>

<a href="links.php?id=3">File 3</a>

<?php

// Load the database connections

include 'db.php';

//check to see if one of the links were clicked

echo '<div>';

if(isset($_GET['id'])){

    // Make a safe string

    $id = mysql_real_escape_string($_GET['id']);

    // Query the database

    $sql = mysql_query("SELECT * FROM table_name WHERE id='$id'");

    if(mysql_num_rows($sql) == 1){

        // If one row was found, create an array of the row

        $row = mysql_fetch_array($sql);

        // echo the column 'content' (change 'content' to your column name)

        echo '<p>'.$row['content'].'</p>';

    }else{

        // Row was not found

        echo '<p>File Not Found.</p>';

    }

}else{

    // the id parameter in the url was not set

    echo '<p>Invalid URL.</p>';

}

echo '</div>';

?>

Snippet Comments

Add Your Comment

Bennett
2011-03-26 18:16:24

You don't need to get information from the database to use query-string URLs. :-X

Dan
2010-12-09 08:22:48

@Sam Yong: That can't be man... The content is pulled from the database, not in the query string, for one... The only thing it references in the query is the ID, and that's escaped...

admin
2010-03-23 00:00:00

I have updated this snippet, tell me what you think!

Sam Yong
2009-07-25 00:00:00

This is a very dangerous code. it might just cause your whole site to be hacked because you can put anything to $_GET['content']. Thus people can just move to your root directory and read your protected files e.g. application configuration file (containing mysql passwords for example)

Add Your Comment