>>324
>such as using include() to grab HTML pages, a common beginner mistake
What the proper way to do something like this? All I've managed to do was make a whitelist of pages that can be included.