First Technique:

Go to: System->Preferences->About Me

Click to Change Password Button

Then Enter the current password and click to the Authenticate

Then Enter the New Password, also Retype the new Password.

Then Click to the Change Password Button. Oh, Try to Enter the strong password.

Now your Current Password is establish.

<?php
function curPageURL() {
$pageURL = ‘http’;
if ($_SERVER["HTTPS"] == “on”) {$pageURL .= “s”;}
$pageURL .= “://”;
if ($_SERVER["SERVER_PORT"] != “80″) {
$pageURL .= $_SERVER["SERVER_NAME"].”:”.$_SERVER["SERVER_PORT"].$_SERVER["REQUEST_URI"];
} else {
$pageURL .= $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
}
return $pageURL;
}
?>

Now, you need to call this function on your desired place where you want to print this link location. Call system are as follows:

<?php
echo curPageURL();
?>

I hope it will be helpful.

PHP_SELF exploits can be avoided by using the htmlentities() function. For example, the form code should be like this to avoid the PHP_SELF exploits:

<form name="test" action="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>"
method="post">

The htmlentities() function encodes the HTML entities. Now if the user tries to exploit the PHP_SELF variable, the attempt will fail and the result of entering malicious code in URL will result in the following output:

<form name=”test” method=”post” action=”form-action.php/&quot;&gt;&lt;script&gt;alert(‘xss’)& lt;/script&gt;&lt;foo”>

As you can see, the script part is now ‘sanitized’.

So don’t forget to convert every occurrence of “$_SERVER['PHP_SELF']” into “htmlentities($_SERVER['PHP_SELF'])” throughout your script.

See below for an example:

<form name="test" action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">

Now, if a user has entered the normal URL in the address bar like “http://www.yourdomain.com/form-action.php”, the above code will be translated as:

<form name="test" action="form-action.php" method="post">

This is the normal case.

Now consider that the user has called this script by entering the following URL in the browser’s address bar:

http://www.yourdomain.com/form-action.php/%22%3E%3Cscript%3Ealert('xss')%3C
/script%3E%3Cfoo%22

In this case, after PHP processing the code becomes:

<form name="test" method="post" action="form-action.php"/>
<script>alert('xss')</script><foo"">

You can see that this code has added a script tag and an alert command. When this page is be loaded, user will see an alert box. This is just a simple example how the PHP_SELF variable can be exploited.

Any JavaScript code can be added between the “script” tag. <script>….HERE….</script>. A hacker can link to a JavaScript file that may be located on another server. That JavaScript file can hold the malicious code that can alter the global variables and can also submit the form to another address to capture the user data, for example.