title: Is it safe to use $_SERVER["SCRIPT_NAME"]
body: <p>I do not want to pass GET or POST variables to a script. I want to use the file name and use it to lookup the product from the php script for example:</p>
  
  <p><code>......./DELL1500.php
  ......./COMPAQ1213.php</code></p>
  
  <p>I have three questions:</p>
  
  <ol>
  <li><p>Where does PHP get the data from <code>$_SERVER["SCRIPT_NAME"]</code> is it from the server or the clients browser?</p></li>
  <li><p>Can anyone think of any security issues of using this?</p></li>
  <li><p>Could this in anyway be incompatible with any older browsers. I assume not if its provided by the server?</p></li>
  </ol>