HOWEVER...
It seems there are some really good reasons for NOT turning register_globals on:
http://www.php.net/release_4_1_0.php
As of 4.1.0 it's better to use these associative arrays:
* $_GET - contains form variables sent through GET
* $_POST - contains form variables sent through POST
* $_COOKIE - contains HTTP cookie variables
* $_SERVER - contains server variables (e.g., REMOTE_ADDR)
* $_ENV - contains the environment variables (e.g., $_ENV["REQUEST_URI"] )
* $_REQUEST - a merge of the GET variables, POST variables and Cookie variables. In other words - all the information that is coming from the user, and that from a security point of view, cannot be trusted.
* $_SESSION - contains HTTP variables registered by the session module
-Colin.