Opening a page in the same window

[BlackMagic]

Okay I asked for help with this a few months back I wanna have pages that in a navigation thing that will open the page within the middle of the site kinda like an iframe but with php I dont really like iframes and im trying to work with php now however I had a script a friend gave me however it ended up get me exploited heh someone was able to run a XSS on me that allowed them to upload stuff to my server so now I need something new to use.

heres what I was using but it get me hacked...

<?php 
if (!isset($_GET["link"])) include 'main.php';
else if(is_file($_GET["link"] . ".php") && $_GET["link"] !="index" ) include htmlspecialchars($_GET["link"] . ".php");
else include 'error.php';
?>

I need something like this but more secure. or if anyone knows how to fix the above script maybe show me how to fix it so it cant be exploited.

[mendhak]

It's a little hard to understand you. Too many run on sentences! And I don't understand what your navigation "thing" is. And what are you saying about IFRAMEs? Do you want to use it or not and if not, what are you currently using?

[penagate]

I did warn you!

[BlackMagic]

Okay Plain in simple You know how you use an iframe to load stuff within a page it opens a new page within the iframe I wanna do the same but in php without an iframe.

an exsample is lets say I have a few things like...

home.php
news.php
downloads.php
about.php

I want all theses pages to open like an iframe does but done in php with no iframe people should me in another topic but I dont get most of it so im trying to see if someone else might know.

[visualAd]

Click the link that penagate supplied you with and use the code that he gave you four months ago.