header ("Content-Type:text/html; charset=windows-1250");
if( preg_match( "/[^0-9]/", $_GET['y'] ) == 1 ) die("No way");
if( preg_match( "/[^0-9]/", $_GET['m'] ) == 1 ) die("No way");
if( preg_match( "/[^a-yA-Z0-9\-\.]/", $_GET['post'] ) == 1 ) die("No way");
$filename = $_GET['y']."/".$_GET['m']."/".$_GET['post'];
if( is_file( $filename ) )
{
include($filename);
}
?>