Navigation like a site without framework

[eluser]Haskabab[/eluser]
Thanks, that was exactly what I needed to know!

And you're correct about how I used the $_GET to include the requested page, but never got hacked though. I always used a switch statement to check if the requested page was supposed to be requested and all variables passed in the $_GET would mostly have been escaped with mysql_real_escape_string() before using it to retrieve data from a database.

Not sure if that was supposed to not get me hacked but I never had any (noticable) problems with it.

And a lot of thanks for that little snippet, I finally understand and you just saved me a lot of researching