added esc_html to PHP_SELF