W00t? That script is completely secure.
You would only have to add some extra security if your script was like this:
PHP Code:
top of page ...
<?php
// Include the page specified.
// go=.htaccess would include all the contents of the file .htaccess
if(!include $_POST['page']){ echo "Page not found!"; }
?>
... end of page
As you can see in the example there would be a huge security risk for any file that's not parsed by the server.
