Oh noes, some of the PHP code leaked here (too)! :o<br /><br /><pre>
&lt;?php
	$_GET['lad'] = str_replace('..','.',$_GET['lad']);
	include(&quot;includes/$_GET['lad']&quot;);
?&gt;</pre>