fix escaping of current filename, fixes #1316

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>

lib/init.php

@@ -61,7 +61,7 @@ unset($_);
 unset($value);
 unset($key);
 
-$filename = basename($_SERVER['PHP_SELF']);
+$filename = htmlentities(basename($_SERVER['PHP_SELF']));
 
 // define default theme for configurehint, etc.
 $_deftheme = 'Sparkle';