very creative solution... im thinkin now we just have to get a list of files in the root folder for the web-page, and then you can detect if the passed variable is the same as any of those filenames, if so then serve the page, if not then serve an error page...