<?php
define("BASE", __DIR__);

$_SERVER['QUERY_STRING'] =
  str_replace('&amp;', '&',
    htmlspecialchars(
      preg_replace(
        '/%.?.?/', '',
        urldecode($_SERVER['QUERY_STRING'])
      )
    )
  );

$_SERVER['REQUEST_URI'] =
  str_replace('&amp;', '&',
    htmlspecialchars(
      preg_replace(
        '/%.?.?/', '',
        urldecode($_SERVER['REQUEST_URI'])
      )
    )
  );

foreach ($_GET as $key => $val) {
  $_GET[$key] =
    htmlspecialchars(
      preg_replace(
        '/%.?.?/', '',
        $_GET[$key]
      )
    );
}