sec 4

$sql = new mysqli("localhost", "whatsupzv321F", "4jioIwCclGxpsbgd", "whatsupRC2p5L");



if (file_exists("/var/www/contents/" . mysqli_real_escape_string($sql, htmlspecialchars($_GET['file']), ENT_QUOTES))) {

print file_get_contents("/var/www/contents/" . mysqli_real_escape_string($sql, htmlspecialchars($_GET['file']), ENT_QUOTES));

}