diff --git a/config.php b/config.php
new file mode 100644
index 0000000..d8063bb
--- /dev/null
+++ b/config.php
@@ -0,0 +1,4 @@
+<?php
+
+$basedir = __DIR__ . "/confs";
+$locale = "fr_FR.UTF-8";
diff --git a/index.php b/index.php
index d4921b3..4990ef6 100644
--- a/index.php
+++ b/index.php
@@ -1,3 +1,14 @@
+<?php
+
+require_once "config.php";
+
+setlocale(LC_CTYPE, $locale);
+
+if ($_SERVER["QUERY_STRING"] != "") {
+    include "show.php";
+    exit;
+}
+?>
 <!DOCTYPE HTML>
 <html lang='fr'>
 
@@ -11,42 +22,39 @@
     <h1>Schémas des VLANs</h1>
     <div class="file-list">
         <ul>
-            <?php
-            $basedir = __DIR__ . "/confs";
+<?php
+function recursive_ls($path) {
+    global $basedir;
 
-            function recursive_ls($path)
-            {
-                global $basedir;
+    if (substr(basename($path), 0, 1) == '.') {
+        return "";
+    }
 
-                if (substr(basename($path), 0, 1) == '.') {
-                    return "";
-                }
-
-                if (is_dir($path)) {
-                    $str = "";
-                    foreach (scandir($path) as $filename) {
-                        $str .= recursive_ls("$path/$filename");
-                    }
-                    if ($str == "") {
-                        return "";
-                    } else {
-                        if ($path == $basedir) {
-                            return "<ul>\n$str\n</ul>\n";
-                        } else {
-                            return "<li>\n<details>\n<summary>" . basename($path) . "</summary>\n<ul>\n" . $str . "</ul>\n</details>\n</li>\n";
-                        }
-                    }
-                }
-
-                if (substr($path, -4) == ".cfg") {
-                    return "<li><a href='show.php?switch=" . str_replace("$basedir/", "", $path) . "' target='_blank'>" . basename($path) . "</a></li>\n";
-                }
-
-                return "";
+    if (is_dir($path)) {
+        $str = "";
+        foreach (scandir($path) as $filename) {
+            $str .= recursive_ls("$path/$filename");
+        }
+        if ($str == "") {
+            return "";
+        } else {
+            if ($path == $basedir) {
+                return "<ul>\n$str\n</ul>\n";
+            } else {
+                return "<li>\n<details>\n<summary>" . basename($path) . "</summary>\n<ul>\n" . $str . "</ul>\n</details>\n</li>\n";
             }
+        }
+    }
 
-            echo recursive_ls($basedir);
-            ?>
+    if (substr($path, -4) == ".cfg") {
+        return "<li><a href='?" . str_replace("$basedir/", "", $path) . "' target='_blank'>" . basename($path) . "</a></li>\n";
+    }
+
+    return "";
+}
+
+echo recursive_ls($basedir);
+?>
         </ul>
     </div>
 </body>
diff --git a/show.php b/show.php
index 0566754..ec04174 100644
--- a/show.php
+++ b/show.php
@@ -1,10 +1,9 @@
 <?php
-setlocale(LC_CTYPE, "fr_FR.UTF-8");
 
-$basedir = __DIR__ . "/confs/";
-$path = escapeshellcmd(realpath($basedir . $_GET["switch"]));
-if (substr($path, -4) != ".cfg") {
-    http_response_code(404);
+$path = realpath($basedir . DIRECTORY_SEPARATOR . ltrim(urldecode($_SERVER["QUERY_STRING"]), '/'));
+
+if (strpos($path, $basedir) !== 0 || substr($path, -4) != ".cfg") {
+    http_response_code(403);
     die();
 }
 
