unless you need it, try to keep register_globals off.
to acces your variables, use
$POST['login'] and $POST['password'] if they're coming from a form, and $GET['login'] or $GET['password'] if they're coming from the query string (URL)
-Jim Keller
http://www.centerfuse.net