referring to the current file in Local Variables

[jidanni]

I suppose why I get risky Local Variables warnings with
# Local Variables:
# compile-command: (concat "php --syntax-check " (buffer-file-name))
# End:
Is someone might just do
# compile-command: (concat "php " (buffer-file-name)) or
# compile-command: (concat "sh " (buffer-file-name))
but couldn't they also do
# compile-command: "sh ThisFile.txt"
Anyway, at least M-x compile will still prompt us.

So how do you recommend I refer to the current file in Local Variables,
without hard wiring it in? Must I whitelist it...?