PHP - Php Include Problem - Includes From One Site Showing On Another Site - Iis

Hi,
I'm pretty new to php and need a bit of basic help.

I have a header and footer include file in a "views" folder. The header itself has a function that's included from another directory. Now when I try to include the header in by index.php in the root it throws and error saying it can't find my function include. Obviously the include directory is relative to the file it's included in. So, what's the trick to fixing this problem? And what's the lesson for future projects? Thanx in advance.

I was using Include() with an ereg expression to strip all harmful characters out of the $_GET['id'];. However, a few people have stated to me that no matter what I do this function is not safe to use and is easily exploitable even after removing illegal characters from $_GET['id'];

Now I am looking for a way to include a web page that uses html and php. file() does not work as it includes my php code within the output so anyone can read it. File_get_contents() did not display any of the page whatsoever.

I have 2 websites, a companies main website written in PHP and a web application they have purchased written in aspx

(main site)
www.example.com

(web app)
www.webapp.com/login.aspx?CompanyName=example

The client wants people to be able to login from their main website which then redirect to the webapp (which will be styled like their branding) without the customer realising they have left the main site.

I thought i may be able to achieve this with a simple include from a page within the main site such as;
Code: [Select]
<?php
// www.example.com/software

include"http://www.webapp.com/login.aspx?CompanyName=example";
?>
This pulls in the login page fine, however when you try to login it does not redirect, it gives a 404 error as it trys to open this URL
http://www.example.com/software/login.aspx?CompanyName=example

Is there a way of pulling in the necessary html from the aspx site to provide a login box in my clients main site but then have it redirect to the correct aspx page (on the aspx site)?

I have thought about using an iframe, but that wont redirect to the webapp upon login, but just keep everything withing the iframe

thanks for any advice...

Sorry in advance for my lack of knowledge. I am not trained and I know almost zero about site building.

On my site there is a tiny rectangle that is showing up on a drop down menu... It hasn't always been there. I'm pretty sure it showed up after upgrading to the newest Internet Explorer. I've been staring at it and finally decided to figure out what it is doing there....
Please, any and all help will be greatly appreciated. The rectangle is not hindering the site, it is just an eye sore.
Thanks in advance!
Yelhsa

See Attachment for Screenshot.

Link to Site:
www.georgiafarmandforest.com

Coding (this is the drop down menu part of the coding, I don't know if you need more than this.... If so, does viewing the source work?):
Menu1=new Array("Home","index.php","",0,20,140);
 
Menu2=new Array("Counties","#","",11,0,140);
  Menu2_1=new Array("Bartow","bartow.php","",0,20,140);
  Menu2_2=new Array("Carroll","carroll.php","",0,20,0);
  Menu2_3=new Array("Catoosa","catoosa.php","",0,20,140);
  Menu2_4=new Array("Chattooga","chattooga.php","",0,20,140);
  Menu2_5=new Array("Dade","dade.php","",0,20,140);
  Menu2_6=new Array("Floyd","floyd.php","",0,20,140);
  Menu2_7=new Array("Gordon","gordon.php","",0,20,140);
  Menu2_8=new Array("Murray","murray.php","",0,20,140);
  Menu2_9=new Array("Polk","polk.php","",0,20,140);
  Menu2_10=new Array("Walker","walker.php","",0,20,140);
  Menu2_11=new Array("Whitfield","whitfield.php","",0,20,80);
 
Menu3=new Array("Resources","resources.php","",0,0,140);
 
Menu4=new Array("Contact Us","contact.php","",0,20,140);
 
Menu5=new Array("Submit Land Wanted","submit.php","",0,0,160);

I have several "sites" located in my html directory, and each has a "general" access point and an "administrator" access point:

/var/www/html/site1/index.php
/var/www/html/site1/administrator/index.php
/var/www/html/site2/index.php
/var/www/html/site2/administrator/index.php
/var/www/html/site3/index.php
/var/www/html/site3/administrator/index.php

All sites are similar except that data will be specific to site1, site2, or site3, etc.   Users who log onto /var/www/html/siteX/index.php are totally unrelated to those who logon to /var/www/html/siteX/administrator/index.php, will have different logon credentials, are stored in different DB tables, and each should have their own session.  If a user logs off of either the general or administrator site, it should not effect the other site even if they were previously logged on to both on the same PC (and of course not effect other sites). When a user logs off, I would like to destroy their previous cookie and associated session.  Users for either will only use https.  I am using Apache to rewrite https://www.mysite.com/ to https://mysite.com/.  While I named the administrator site "administrator" above, the administrator user has the ability to change the directory name.   I am thinking I need to use session_set_cookie_params to specify where I wish the session cookie to be stored since /var/www/html/siteX/administrator/index.php is a sub-directory to /var/www/html/siteX/index.php, but am not really sure.  Sorry for the cryptic post, but I am not very well versed in this subject. How would you recommend setting up cookies/sessions for this scenario?  Thank you