ahhh! thanks!

Quick question, how would I use this in a class?

In the HTML, I would do it the way you just wrote it:

$_SERVER['PHP_SELF'] = htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES);


But when including a class, do I have to do the same thing in the class?

$_SERVER['PHP_SELF'] = htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES);

Reason why I ask this is that in my class I am using $_SERVER['PHP_SELF'] so I want to make sure that is escaped too...