<?php
$id = $_GET['id'];
$page = preg_replace('/[^a-z0-9]+/', '', $id);
if( is_file("$page.php") ) {
  include('header.php');
  include("$page.php");
  include('footer.php');
} else {
  include('noid.php');
}
?>