The page will accept 'any' value in the url variable at the moment. You need to validate your data first. For instance, you might use
file_exists() to check whether the page exists in your directory, and if not refer to the default page.
The title works for me. Are you sure that your pages actually contain titles?
PHP Code:
<?php
$url = (isset ($_GET['url']) && file_exists($_GET['url'])) ? strtolower($_GET['url']) : "http://www.codingforums.com/showthread.php?t=263790";
$file = file($url);
$file = implode("", $file);
if (preg_match("/<title>(.+)<\/title>/i", $file, $m))
$title = $m[1];
else
$title = "someDefaultTitle";
?>