$_SERVER["PHP_SELF"] is a super-global and returns the file name of the currently used file(script).
Why $_SERVER["PHP_SELF"] is used:
due to $_SERVER["PHP_SELF"], you can get an error on the same page you are working from the script running.
How to avoid $_SERVER["PHP_SELF"] from hackers?htmlspecialchars($_SERVER["PHP_SELF"])
htmlspecialchars will give random char in the filename so it will be saved from expoilts.
<pre><code class="lang-plaintext">&lt;form method="post" action="&lt;?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?&gt;"&gt;
</code></pre>

**$\_SERVER\["PHP\_SELF"\] is a super-global and returns the file name of the currently used file(script).**

*Why $\_SERVER\["PHP\_SELF"\] is used:*

due to $\_SERVER\["PHP\_SELF"\], you can get an error on the same page you are working from the script running.

**How to avoid $\_SERVER\["PHP\_SELF"\] from hackers?**htmlspecialchars($\_SERVER\["PHP\_SELF"\])

htmlspecialchars will give random char in the filename so it will be saved from expoilts.

```plaintext
<form method="post" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>">
```

PHP_SELF

PHP Short Notes -Part2

Join me on this exciting journey of programming discovery as I share my knowledge and experiences in software development through my passionate blogging.
