Article:		User-Friendly Form Validation with PHP and CSS
Subject:		$_SERVER['PHP_SELF']?
Date:		2004-05-18 15:03:57
From:		tiffanyb
You could also use action="$_SERVER['PHP_SELF']," and include the proper logic and the form in one page.

Showing messages 1 through 1 of 1.

• $_SERVER['PHP_SELF']?
  2009-05-17 21:56:17  Shubhamoy [View]
  
  
  Hi,
  
  We should avoid using $_SERVER['PHP_SELF'] instead htmlentities($_SERVER['PHP_SELF']) should be preferred. This will block the XSS Hack. For more information read this : http://www.html-form-guide.com/php-form/php-form-action-self.html
  
  BR,
  Shubhamoy
  http://shubhamoy.com/blog