Opening a page in the same window

Okay I asked for help with this a few months back I wanna have pages that in a navigation thing that will open the page within the middle of the site kinda like an iframe but with php I dont really like iframes and im trying to work with php now however I had a script a friend gave me however it ended up get me exploited heh someone was able to run a XSS on me that allowed them to upload stuff to my server so now I need something new to use.

heres what I was using but it get me hacked...

Code:

---

<?php
if (!isset($_GET["link"])) include 'main.php';
else if(is_file($_GET["link"] . ".php") && $_GET["link"] !="index" ) include htmlspecialchars($_GET["link"] . ".php");
else include 'error.php';
?>

---

I need something like this but more secure. or if anyone knows how to fix the above script maybe show me how to fix it so it cant be exploited.

It's a little hard to understand you. Too many run on sentences! And I don't understand what your navigation "thing" is. And what are you saying about IFRAMEs? Do you want to use it or not and if not, what are you currently using?

I did warn you!

Okay Plain in simple You know how you use an iframe to load stuff within a page it opens a new page within the iframe I wanna do the same but in php without an iframe.

an exsample is lets say I have a few things like...

home.php
news.php
downloads.php
about.php

I want all theses pages to open like an iframe does but done in php with no iframe people should me in another topic but I dont get most of it so im trying to see if someone else might know.

Click the link that penagate supplied you with and use the code that he gave you four months ago.