This is Level 3
";
if (isset( $_GET[ 'file' ]))
{
$secure3 = $_GET[ 'file' ];
$secure3 = strtolower($secure3); #There is no uppercase in the FileInclusion folder.
$secure3 = str_replace( array( "..", "\\" , "..\\" , ":", "/", "%" ), "", $secure3 );
$secure3 = str_replace( array( "http://" , "https://" ),"", $secure3 );
if (isset($secure3))
{
include($secure3);
}
}
?>