How is SCRIPT_NAME dangerous in PHP?
<p>I am using line below in my php blog site, how is that danger ? I have <code>register_global off</code> and <code>magic_quotes_gpc()</code> also off and using php 5.2. Can anyone please enlight me, or give alternative to this ? I did try <code>$_SERVER['php_self']</code> but that didn't work.</p>

<pre><code>&lt;form action="&lt;?php echo $SCRIPT_NAME. "?id=" . $validentry; ?&gt;" method="post"&gt;
</code></pre>
