PHP_SELF XSS Woes

Sean Coates – XSS Woes:

„What I forgot about, as I suspect some of you have, too (or maybe I’m the only loser who didn’t think of this (-; ), is that $_SERVER[‚PHP_SELF‘] can be manipulated by the user.“