$cat = preg_replace("/[^a-zA-Z0-9]\_\-]/","",$_GET['cat']); $file = preg_replace("/[^a-zA-Z0-9]\_\-]/","",$_GET['file']); print "
$file
"; print "
"; if (is_dir("portfolio/$cat")) { if (file_exists("portfolio/$cat/images/$file")) { echo "
"; } } ?>