Description:
------------
I created a form with a textarea named "editContent" and a submit button named "btnSave":

  <form name="editForm" action="<?php echo $_SERVER["PHP_SELF"]; ?>" method="post" enctype="multipart/form-data">
  <textarea name='editContent' style='width: 550px; height: 400px;' wrap='off'>
  <?php htmlspecialchars($txt); ?>
  </textarea>
  <input type="submit" name="btnSave" value="Save">

The textarea is used for editing php files. Whenever there is a file containg an sql statement containing the word VALUES (e. g. for insert) then I get this error message after submitting:

"You don't have permission to access /folder/script.php on this server."

Reproduce code:
---------------
$query="INSERT INTO TABLE1 (FIELD1, FIELD2) VALUES (1,2)"; (Part of submitted text)

Expected result:
----------------
No error message.

Actual result:
--------------
"You don't have permission to access /folder/script.php on this server." This happens only if the text contains the word VALUES.