Daily security quiz #11

Question for 2026-11-11. Read the code and pick the most serious security vulnerability.

This code loads the corresponding page when a request such as ?page=about is made. What is the most serious vulnerability?

1<?php
2$page = $_GET['page'] ?? 'home';
3include __DIR__ . '/pages/' . $page . '.php';

1. AThe page value is not validated, allowing files at other paths to be executed or exposed (file inclusion vulnerability)
2. BThe ?? operator does not work in PHP 5
3. CA 404 response is not sent when the page does not exist
4. Drequire should be used instead of include