Index: branches/feature-module-update/data/class/SC_PageNavi.php
===================================================================
--- branches/feature-module-update/data/class/SC_PageNavi.php	(revision 15532)
+++ branches/feature-module-update/data/class/SC_PageNavi.php	(revision 15879)
@@ -28,4 +28,5 @@
     function SC_PageNavi($now_page, $all_row, $page_row, $func_name, $navi_max = NAVI_PMAX) {
         $this->arrPagenavi['mode'] = 'search';
+        $ps = htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES);
 
         //現在ページ($now_page)が正しい数値でない場合
@@ -59,5 +60,5 @@
             // FIXME ちゃんとサニタイズしよう
             if ($this->now_page > 1) {
-                $before="<a href=\"". $_SERVER['PHP_SELF']. "\" onclick=\"$func_name('" . (($this->now_page) - 1) . "'); return false;\"><<前へ</a> ";
+                $before="<a href=\"". $ps . "\" onclick=\"$func_name('" . (($this->now_page) - 1) . "'); return false;\"><<前へ</a> ";
                 $this->arrPagenavi['before'] = ($this->now_page) - 1;
             }else{
@@ -66,5 +67,5 @@
 
             if ($this->now_page < $this->max_page) {
-                $next="<a href=\"". $_SERVER['PHP_SELF']. "\" onclick=\"$func_name('" . (($this->now_page) + 1) ."'); return false;\">次へ>></a> ";
+                $next="<a href=\"". $ps . "\" onclick=\"$func_name('" . (($this->now_page) + 1) ."'); return false;\">次へ>></a> ";
                 $this->arrPagenavi['next'] = ($this->now_page) + 1;
             }else{
@@ -106,5 +107,5 @@
                     $page_number .= "<strong>$i</strong> ";
                 } else {
-                    $page_number.="<a href=\"". $_SERVER['PHP_SELF']. "\" onclick=\"$func_name('$i'); return false;\">$i</a> ";
+                    $page_number.="<a href=\"".  $ps . "\" onclick=\"$func_name('$i'); return false;\">$i</a> ";
                 }