Include Content pages in Master page

**Arjen** · Jan 12 '07, 07:05 AM

Re: Include Content pages in Master page

McKirahan schreef:

I am looking for feedback on an approach to using PHP.
>
Below is a stripped down version of a Home page: "index.php" .
>
The content of the site is displayed in the middle of the page and
is "included" via "Page1.htm" , "Page2.htm" , or "Page3.htm" .
>
The page to be "included" is specified via the QueryString
which is specified in the navigational hyper links;
for example, "index.php?Page 1".
>
>
<html>
<head>
<title><?php echo $_SERVER["PHP_SELF"] ?></title>
</head>
<body>
<table border="0" cellspacing="0" cellpadding="0" width="100%"
height="100%">
<tr>
<td bgcolor="green" colspan="3">&nb sp;</td>
</tr>
<tr>
<td bgcolor="red" width="5"%>&nbs p;</td>
<td bgcolor="white" width="90%">
<p align="center">
<a href="index.php ?Page1">Page 1</a|
<a href="index.php ?Page2">Page 1</a|
<a href="index.php ?Page3">Page 3</a>
<hr>
</p>

<?php
$QS = $_SERVER["QUERY_STRI NG"];
echo $QS;
if ($QS == "Page1") include "Page1.htm" ;
elseif ($QS == "Page2") include "Page2.htm" ;
elseif ($QS == "Page3") include "Page3.htm" ;
else include "Page1.htm" ;
?>

<br><br>
</td>
<td bgcolor="blue" width="5%">&nbs p;</td>
</tr>
<tr>
<td bgcolor="yellow " colspan="3">&nb sp;</td>
</tr>
</table>
</body>
</html>
>
One advantage I see to this approach is that the "content" pages
are isolated from the "master" page and can be easily maintained.
>
One disadvantage I see to this approach is that search engines
would not be able to catalog the site beyond the Home page.

Why wouldn't a search engine be able to catalog ?

Google can follow dynamic urls

For a nicer url use mod rewrite
/mymap/my-title.html /index.php?QS=3 [NC]

or something more dynamic
/page_(.+).php /index.php?QS=$1 [NC]

Are there other disadvantages (or other considerations) that I don't see?

Yup .. duplicate content (index.php?QS=w ooooooom)

--
Arjen
http://www.hondenpage.com - Mijn site over honden

**OmegaJunior** · Jan 12 '07, 07:05 AM

Re: Include Content pages in Master page

On Fri, 12 Jan 2007 06:36:51 +0100, McKirahan <News@McKirahan .comwrote:

I am looking for feedback on an approach to using PHP.
>
Below is a stripped down version of a Home page: "index.php" .
>
The content of the site is displayed in the middle of the page and
is "included" via "Page1.htm" , "Page2.htm" , or "Page3.htm" .
>
The page to be "included" is specified via the QueryString
which is specified in the navigational hyper links;
for example, "index.php?Page 1".
>
>
<html>
<head>
<title><?php echo $_SERVER["PHP_SELF"] ?></title>
</head>
<body>
<table border="0" cellspacing="0" cellpadding="0" width="100%"
height="100%">
<tr>
<td bgcolor="green" colspan="3">&nb sp;</td>
</tr>
<tr>
<td bgcolor="red" width="5"%>&nbs p;</td>
<td bgcolor="white" width="90%">
<p align="center">
<a href="index.php ?Page1">Page 1</a|
<a href="index.php ?Page2">Page 1</a|
<a href="index.php ?Page3">Page 3</a>
<hr>
</p>

<?php
$QS = $_SERVER["QUERY_STRI NG"];
echo $QS;
if ($QS == "Page1") include "Page1.htm" ;
elseif ($QS == "Page2") include "Page2.htm" ;
elseif ($QS == "Page3") include "Page3.htm" ;
else include "Page1.htm" ;
?>

<br><br>
</td>
<td bgcolor="blue" width="5%">&nbs p;</td>
</tr>
<tr>
<td bgcolor="yellow " colspan="3">&nb sp;</td>
</tr>
</table>
</body>
</html>
>
One advantage I see to this approach is that the "content" pages
are isolated from the "master" page and can be easily maintained.
>
One disadvantage I see to this approach is that search engines
would not be able to catalog the site beyond the Home page.
>
Are there other disadvantages (or other considerations) that I don't see?
>
Thanks in advance.
>
P.S. I am new to PHP but have worked with ASP for years.
>
>

1) Good search engines *cough*Google*c ough* will take the querystring into
consideration while indexing.
2) For sake of ease, scalability, and security you may want to build a
querystring like ?id=1, instead of ?page1. Then you can read the page id
with $_GET['id'].
3) Using this method of including, you should perform a check on file
existence.

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

**jussist@gmail.com** · Jan 12 '07, 09:15 AM

Re: Include Content pages in Master page

2) For sake of ease, scalability, and security you may want to build a

querystring like ?id=1, instead of ?page1. Then you can read the page id
with $_GET['id'].
3) Using this method of including, you should perform a check on file
existence.

Well in this case a page is not included directly according to the qs,
but the qs rather defines what page is included. If I understand
correctly, there could be:

if( $qs == "Contact" || $qs == "ContactInf o" ) {
include('NoneOf YourBusiness.ht m');
}

So the value of qs might have nothing to do with the included file's
name. At least that is what I understood.

**McKirahan** · Jan 13 '07, 06:25 PM

Re: Include Content pages in Master page

"OmegaJunio r" <omegajunior@sp amremove.home.n lwrote in message
news:op.tl04a0n e70mclq@cp13979 5-a.landg1.lb.hom e.nl...

On Fri, 12 Jan 2007 06:36:51 +0100, McKirahan <News@McKirahan .comwrote:
>

I am looking for feedback on an approach to using PHP.

Below is a stripped down version of a Home page: "index.php" .

The content of the site is displayed in the middle of the page and
is "included" via "Page1.htm" , "Page2.htm" , or "Page3.htm" .

The page to be "included" is specified via the QueryString
which is specified in the navigational hyper links;
for example, "index.php?Page 1".

[snip]

One advantage I see to this approach is that the "content" pages
are isolated from the "master" page and can be easily maintained.

One disadvantage I see to this approach is that search engines
would not be able to catalog the site beyond the Home page.

Are there other disadvantages (or other considerations) that I don't

see?

Thanks in advance.

P.S. I am new to PHP but have worked with ASP for years.

>
>
>
1) Good search engines *cough*Google*c ough* will take the querystring
into consideration while indexing.
2) For sake of ease, scalability, and security you may want to build a

querystring like ?id=1, instead of ?page1. Then you can read the page id

with $_GET['id'].
3) Using this method of including, you should perform a check on file
existence.
>
Thanks for you reply.

I appreciate your ideas and may use them.

Why is "id=" easier and/or more scalable and/or more secure?

**McKirahan** · Jan 13 '07, 06:25 PM

Re: Include Content pages in Master page

"Arjen" <dont@mail.mewr ote in message news:eo7bbp$qmo $1@brutus.eur.n l...

McKirahan schreef:

I am looking for feedback on an approach to using PHP.

Below is a stripped down version of a Home page: "index.php" .

The content of the site is displayed in the middle of the page and
is "included" via "Page1.htm" , "Page2.htm" , or "Page3.htm" .

The page to be "included" is specified via the QueryString
which is specified in the navigational hyper links;
for example, "index.php?Page 1".

[snip]

One advantage I see to this approach is that the "content" pages
are isolated from the "master" page and can be easily maintained.

One disadvantage I see to this approach is that search engines
would not be able to catalog the site beyond the Home page.

>
Why wouldn't a search engine be able to catalog ?
>
Google can follow dynamic urls
>
For a nicer url use mod rewrite
/mymap/my-title.html /index.php?QS=3 [NC]
>
or something more dynamic
/page_(.+).php /index.php?QS=$1 [NC]
>

Are there other disadvantages (or other considerations) that I don't

see?

>
Yup .. duplicate content (index.php?QS=w ooooooom)

Thanks for you reply.

I presumed wrong about the ability of search engines to index the site;
thanks for correcting me.

Not sure what you mean by "duplicate content"?

Also, I'll have to study PHP some more to understand your dynamic url...

**Arjen** · Jan 13 '07, 07:05 PM

Re: Include Content pages in Master page

I presumed wrong about the ability of search engines to index the site;

thanks for correcting me.
>
Not sure what you mean by "duplicate content"?

In your example every non existent QS would be the same as your default
page. So you have multiple occurences of your default page. You would
have to set a 301 header for those pages. Some search engines give you a
penalty for duplicate content.

>
Also, I'll have to study PHP some more to understand your dynamic url...

What exactly dont you understand ? I'd be happy to explain :-)

--
Arjen

Honden Page: uw hond en honden.

http://www.hondenpage.com

HondenPage: alles over uw hond of honden,fokkers en puppy's. Je vindt hier het hondenforum, honden foto's, fokkers, puppy's, de honden encyclopedie en nog veel meer !

**OmegaJunior** · Jan 13 '07, 09:25 PM

Re: Include Content pages in Master page

On Sat, 13 Jan 2007 19:16:08 +0100, McKirahan <News@McKirahan .comwrote:

>
Why is "id=" easier and/or more scalable and/or more secure?
>
>

It's more scalable as a querystring parameter like '?id=1' than a full
querystring like '?page1' because it lets you add more parameters to the
querystring than just the querystring itself.

Instead of reading the entire querystring '?page1' using
$_SERVER['QUERY_STRING'] and using the result 'page1' as a single
parameter, you can string several parameters together inside a querystring
using a & as separator like so: '?id=1&sort=a&l ang=en' and read each
parameter with $_GET[parametername] like $_GET['id'] (results in '1'),
$_GET['sort'] (results in 'a'), and $_GET['lang'] (results in 'en').

Which parameters you put into the querystring and what your code does with
them, is your choice entirely, hence the scalability.

Look at Google's advanced search, for instance:

Google Search

http://www.google.com/search?as_q=test&hl=en&rls=en&num=10&btnG=Google+Search&as_epq=&as_oq=&as_eq=&lr=&as_ft=i&as_filetype=&as_qdr=all&as_nlo=&as_nhi=&as_occt=any&as_dt=i&as_sitesearch=&as_rights=&safe=off

Everything behind the first ? is the querystring, which contains no less
than 19 parameters (some of which do have values, some of which don't).

Security comes in because of the way you intend to use the parameter
value. If you would simply code
include($_SERVE R['QUERY_STRING']);
you open up your code for all kinds of injection. Rule of thumb: don't
trust a visitor's input. What prevents a malevolent visitor from
requesting '?config.ini' or '?.htaccess' ? Nothing, because they can enter
it using their browser's address bar. But we can check for their input and
allow only those values we trust, like so:

$idPageToInclud e = $_GET['id']; /* parameter named 'id' by choice,
could've just as easily be named 'page' */
if (is_numeric($id PageToInclude)) { //If I'd want to accept only numbers,
for instance
$pathPageToIncl ude = 'page'.$idPageT oInclude.'html' ; //Create the
complete file name
if (file_exists($p athPageToInclud e)) { //Make sure it exists
include($pathPa geToInclude);
} else {
print('File not found.');
}
}

Why do I want to accept numbers as input only? Because that way I can
prevent that a malevolent user tries to pass something like
'/../../passwords.xml/' into the querystring.

Hope this helps!

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

**Geoff Berrow** · Jan 14 '07, 03:05 PM

Re: Include Content pages in Master page

Message-ID: <op.tl32qagg70m clq@cp139795-a.landg1.lb.hom e.nlfrom
OmegaJunior contained the following:

>On Sat, 13 Jan 2007 19:16:08 +0100, McKirahan <News@McKirahan .comwrote:
>

>>
>Why is "id=" easier and/or more scalable and/or more secure?
>>
>>

>
>It's more scalable as a querystring parameter like '?id=1' than a full
>querystring like '?page1' because it lets you add more parameters to the
>querystring than just the querystring itself.

Up to a point. You could, of course do ?ham-eggs-cheese and explode the
query string to get three different variables

>

....

>Security comes in because of the way you intend to use the parameter
>value. If you would simply code
>include($_SERV ER['QUERY_STRING']);
>you open up your code for all kinds of injection. Rule of thumb: don't
>trust a visitor's input. What prevents a malevolent visitor from
>requesting '?config.ini' or '?.htaccess' ? Nothing, because they can enter
>it using their browser's address bar. But we can check for their input and
>allow only those values we trust, like so:
>
>$idPageToInclu de = $_GET['id']; /* parameter named 'id' by choice,
>could've just as easily be named 'page' */
>if (is_numeric($id PageToInclude)) { //If I'd want to accept only numbers,
>for instance
$pathPageToIncl ude = 'page'.$idPageT oInclude.'html' ; //Create the
>complete file name
if (file_exists($p athPageToInclud e)) { //Make sure it exists
include($pathPa geToInclude);
} else {
print('File not found.');
}
>}

I think it's a bit simpler to use an array (ie you can use your existing
filenames)

$page=array(1=> 'page1.php',2=> 'page2.php',3=> 'anypage.php');

if(isset($_GET['id'])){
$PageToInclude= (isset($page[$_GET['id']]))?$page[$_GET['id']]:"errorpage.php ";
//errorpage.php included if someone messes with the url.
include($PageTo Include);
}

--
Geoff Berrow 011000100110110 0010000000110
001101101011011 001000110111101 100111001011
100110001101101 111001011100111 010101101011

**McKirahan** · Jan 14 '07, 09:55 PM

Re: Include Content pages in Master page

"Arjen" <dont@mail.mewr ote in message
news:45a92b5e$0 $67354$dbd4f001 @news.wanadoo.n l...

I presumed wrong about the ability of search engines to index the site;
thanks for correcting me.

Not sure what you mean by "duplicate content"?

>
In your example every non existent QS would be the same as your default
page. So you have multiple occurences of your default page. You would
have to set a 301 header for those pages. Some search engines give you a
penalty for duplicate content.
>

>
Also, I'll have to study PHP some more to understand your dynamic

url...

>
What exactly dont you understand ? I'd be happy to explain :-)

I don't understand this suggestion:

or something more dynamic
/page_(.+).php /index.php?QS=$1 [NC]

What does (.+) do?
Why two ".php" filenames?
Where does $1 come from?
What does [NC} mean?

Sorry, I'm new to PHP.

Any website or reading suggestions?
I do use http://www.php.net

Thanks.

**McKirahan** · Jan 14 '07, 09:55 PM

Re: Include Content pages in Master page

"OmegaJunio r" <omegajunior@sp amremove.home.n lwrote in message
news:op.tl32qag g70mclq@cp13979 5-a.landg1.lb.hom e.nl...

On Sat, 13 Jan 2007 19:16:08 +0100, McKirahan <News@McKirahan .comwrote:
>

Why is "id=" easier and/or more scalable and/or more secure?

>
It's more scalable as a querystring parameter like '?id=1' than a full
querystring like '?page1' because it lets you add more parameters to the
querystring than just the querystring itself.

I understand; however, I only intend to pass a page reference.

[snip]

Security comes in because of the way you intend to use the parameter
value. If you would simply code
include($_SERVE R['QUERY_STRING']);
you open up your code for all kinds of injection. Rule of thumb: don't
trust a visitor's input. What prevents a malevolent visitor from
requesting '?config.ini' or '?.htaccess' ? Nothing, because they can

enter

it using their browser's address bar.

However, I construct the page name from the QueryString;
I don't load whatever is passed in.

[snip]

But we can check for their input and
allow only those values we trust, like so:

if (is_numeric($id PageToInclude)) { //If I'd want to accept only numbers,

I like the numeric only input and will use it.

if (file_exists($p athPageToInclud e))

I'll use this too.

Why do I want to accept numbers as input only? Because that way I can
prevent that a malevolent user tries to pass something like
'/../../passwords.xml/' into the querystring.
>
Hope this helps!

It does! Thanks for the education.

**Arjen** · Jan 14 '07, 10:45 PM

Re: Include Content pages in Master page

McKirahan schreef:

"Arjen" <dont@mail.mewr ote in message
news:45a92b5e$0 $67354$dbd4f001 @news.wanadoo.n l...

>>I presumed wrong about the ability of search engines to index the site;
>>thanks for correcting me.
>>>
>>Not sure what you mean by "duplicate content"?

>In your example every non existent QS would be the same as your default
>page. So you have multiple occurences of your default page. You would
>have to set a 301 header for those pages. Some search engines give you a
>penalty for duplicate content.
>>

> >
> Also, I'll have to study PHP some more to understand your dynamic

url...

>What exactly dont you understand ? I'd be happy to explain :-)

>
I don't understand this suggestion:
>

>or something more dynamic
>/page_(.+).php /index.php?QS=$1 [NC]

>

This is not PHP ... I should have been clearer. This is syntax for
apache's mod rewrite.

404 Not Found

http://httpd.apache.org/docs/1.3/mod/mod_rewrite.html

It means rewrite pages like this:
/page_1.php ->index.php?qs =1
/page_2.php ->index.php?qs =2
/page_look-im-a-bird.php ->index.php?qs=l ook-im-a-bird
etc

This is a more friendly way of showing dynamic pages

--
Arjen

Honden Page: uw hond en honden.

http://www.hondenpage.com

HondenPage: alles over uw hond of honden,fokkers en puppy's. Je vindt hier het hondenforum, honden foto's, fokkers, puppy's, de honden encyclopedie en nog veel meer !

Include Content pages in Master page

Include Content pages in Master page

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment