From dfab2204580aedcd5c397cc2927bb8da97a5a9b7 Mon Sep 17 00:00:00 2001
From: Sebastian Mendel <cybot_tm@users.sourceforge.net>
Date: Thu, 27 Oct 2005 19:27:57 +0000
Subject: [PATCH] [XSS] clean $_SERVER variables (sometimes i just forget to
 save all files before checkin ...)

---
 libraries/common.lib.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/libraries/common.lib.php b/libraries/common.lib.php
index c81b61e2b..e2e4e9976 100644
--- a/libraries/common.lib.php
+++ b/libraries/common.lib.php
@@ -2346,7 +2346,7 @@ window.parent.updateTableTitle( '<?php echo $uni_tbl; ?>', '<?php echo PMA_jsFor
      * $GLOBALS['strEmpty']
      * $GLOBALS['strDrop']
      * $GLOBALS['active_page']
-     * $_SERVER['PHP_SELF']
+     * $GLOBALS['PHP_SELF']
      * htmlentities()
      * PMA_generate_common_url()
      * $GLOBALS['url_query']
@@ -2384,7 +2384,7 @@ window.parent.updateTableTitle( '<?php echo $uni_tbl; ?>', '<?php echo PMA_jsFor
             elseif ( isset( $tab['active'] ) && $tab['active']
                   || isset( $GLOBALS['active_page'] )
                   && $GLOBALS['active_page'] == $tab['link'] 
-                  || basename( $_SERVER['PHP_SELF'] ) == $tab['link'] )
+                  || basename( $GLOBALS['PHP_SELF'] ) == $tab['link'] )
             {
                 $tab['class'] = 'active';
             }