Fix stored XSS security issue: remove inline JS from URL in PreparePH…

…P_SELF.fnc.php

functions/PreparePHP_SELF.fnc.php

@@ -200,7 +200,7 @@ function( $match ) {
 
 	foreach ( $remove as $remove_string )
 	{
-		while ( strpos( $string, $remove_string ) !== false )
+		while ( stripos( $string, $remove_string ) !== false )
 		{
 			$string = str_ireplace( $remove, '', $string );
 		}