Undefined Variable PHP_SELF

adadeh picture adadeh · Oct 3, 2012 · Viewed 37.3k times · Source

I am developing a backend with php here.

I am having problem with such error like this:

Undefined variable : PHP_SELF

on my htdocs directory.

I'm developing with php 5.4.4 , and if you want to look at the source code here it is:

http://pastebin.com/xr2PxbNG

Answer

Sven picture Sven · Oct 3, 2012

Do not use any of the suggested versions of PHP_SELF. It is a security nightmare, opening up your PHP to a multitude of possible injection attacks.

What are you trying to achieve? Generate the URL for a form sending to itself? Use action="" for that - it is a valid approach and will always use the URL for sending the form as for loading.

If you must know the requested script, use $_SERVER['SCRIPT_NAME'] instead.