instructions.php

<?php

define('DVWA_WEB_PAGE_TO_ROOT', '');
require_once DVWA_WEB_PAGE_TO_ROOT . 'dvwa/includes/dvwaPage.inc.php';

dvwaPageStartup(array('phpids'));

$page = dvwaPageNewGrab();
$page['title']   = 'Instructions' . $page['title_separator'].$page['title'];
$page['page_id'] = 'instructions';

$docs = array(
	'readme'         => array('legend' => 'Read Me', 'file' => 'README.md'),
	'PDF'            => array('legend' => 'PDF Guide', 'file' => 'docs/pdf.html'),
	'changelog'      => array('legend' => 'Change Log', 'file' => 'CHANGELOG.md'),
	'copying'        => array('legend' => 'Copying', 'file' => 'COPYING.txt'),
	'PHPIDS-license' => array('legend' => 'PHPIDS License', 'file' => DVWA_WEB_PAGE_TO_PHPIDS . 'LICENSE'),
);

$selectedDocId = isset($_GET['doc']) ? $_GET['doc'] : '';
if(!array_key_exists($selectedDocId, $docs)) {
	$selectedDocId = 'readme';
}
$readFile = $docs[$selectedDocId]['file'];

$instructions = file_get_contents(DVWA_WEB_PAGE_TO_ROOT.$readFile);

function urlReplace($matches) {
	return dvwaExternalLinkUrlGet($matches[1]);
}

// Make links and obfuscate the referer...
$instructions = preg_replace_callback(
	'/((http|https|ftp):\/\/([[:alnum:]|.|\/|?|=]+))/',
	'urlReplace',
	$instructions
);

$instructions = nl2br($instructions);

$templateVars = getPageVariables($page);
$templateVars = array_merge($templateVars, [
    'title' => $page['title'],
    'page_id' => $page['page_id'],
    'docs' => $docs,
    'selectedDocId' => $selectedDocId,
    'instructions' => $instructions
]);

echo renderPage('instructions', $templateVars);

?>