WooYun.org

if($_POST['act']=='op')
		{
			if($_POST['submit']==$lang['btn_submit'])
			{
				if(is_array($_POST['chk']))
				{
					$id=implode(",",$_POST['chk']);
					$sql="delete from ".TGCAT." where id in ($id)";
					$db->query($sql);
					$sql="delete from ".TGCAT." where parent_id in ($id)";
					$db->query($sql);
				}
				if($_POST['displayorder'])
				{
					foreach($_POST['displayorder'] as $key=>$list)
					{
						$db->query("update ".TGCAT." set displayorder='$list' where id='$key'");		
					}
				}
			}
			msg("?m=tg&s=tg_cat.php");
		}

$_GET['s']=!empty($_GET['s'])?$_GET['s']:'index';
		$_GET['m']=!empty($_GET['m'])?$_GET['m']:'product';
.........
include('module/'.$m.'/'.$s.'.php');