From f55cdf66fc6a4912d0b634fd97627365750b000a Mon Sep 17 00:00:00 2001
From: John Crisp <john@reetspetit.net>
Date: Fri, 21 Feb 2020 12:33:55 +0100
Subject: [PATCH] sanitise Vars

---
 include/my_functions.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/my_functions.php b/include/my_functions.php
index 7c88988..679e293 100644
--- a/include/my_functions.php
+++ b/include/my_functions.php
@@ -1,7 +1,7 @@
 <?php
 
 #$PHP_SELF = $_SERVER['PHP_SELF'];
-$PHP_SELF = $_SERVER['PHP_SELF'];
+$PHP_SELF = htmlspecialchars($HTTP_SERVER_VARS['PHP_SELF'], ENT_QUOTES, "utf-8");
 
 #
 # Returns TRUE if browser is Internet Explorer.