routes.php

<?php
  function call($controller, $action) {
    // require the file that matches the controller name
    require_once('controllers/' . $controller . '_controller.php');

    // create a new instance of the needed controller
    switch($controller) {
		case 'about':
			$controller = new AboutController();
			break;
		case 'act':
			$controller = new ActController();
			break;
	    case 'contacts':
	        $controller = new ContactsController();
			break;
		case 'historic':
			$controller = new HistoricController();
			break;
		case 'marathon':
			$controller = new MarathonController();
			break;
      	case 'shows':
        	$controller = new ShowsController();
      	  	break;
    }

    // call the action
    $controller->{ $action }();
  }

  // just a list of the controllers we have and their actions
  // we consider those "allowed" values
  $controllers = array('about' 		=> ['index', 'error'], 
					   'act' 		=> ['index', 'show', 'error'], 
				  	   'contacts' 	=> ['index', 'error', 'error'],
				   	   'historic' 	=> ['index', 'show', 'error'],
				   	   'marathon'	=> ['index', 'show', 'error'],
				   	   'shows'		=> ['index', 'error']);
					   
  // check that the requested controller and action are both allowed
  // if someone tries to access something else he will be redirected to the error action of the pages controller
  if (array_key_exists($controller, $controllers)) {
    if (in_array($action, $controllers[$controller])) {
      call($controller, $action);
    } else {
      call('shows', 'error');
    }
  } else {
    call('shows', 'error');
  }
?>