$Page = preg_replace('/\?.*/', '', $_SERVER['REQUEST_URI']);
$Page = urldecode(trim($Page, '/')) ?: 'index';
while (TRUE) {
+ if (file_exists("$Page/.private")) {
+ # access restriction
+ if (!isset($User)) {
+ http_response_code(403);
+ include_once 'page.inc.php';
+ ob_start();
+ require_once './403.html';
+ exit;
+ }
+ }
+
if (file_exists("$Page.php")) {
break;
}