fix for PHP_SELF (which was introduced some days ago) to avoid XSS attacks