I meant don't turn them ON... thanks. The reason why you don't want to have them on is this. Consider this script:
<?
if (($user == "bob") and ($pass == "secret")) {
$auth = 1;
} else {
$auth = 0;
}
if ($auth == 1) echo "You are authorized!";
?>
If I were to pass in xxx.php?auth=1 I would be authorized. Hope this makes sense. You probably will have to rewrite a lot of stuff, but it's all for the better. The register globals thing will no longer be an option with 4.3.x and above. 4.2.x is transitional.