Using `$_SERVER` is unsecure. But what is even more unsecure is that you do not escape the string before you perform your SQL query. See https://github.com/phpBB-Social-Network/phpBB-Social-Network/pull/202/files#L0R373. So please, stop using `$_SERVER` (because it can be easily replaced by custom string) and excape all inputs to SQL queries.