It's sad when people still give advice here to use $elvis to access the contents of index.php?elvis=xxxxx.
It is a big security concern because you are allowing end users to inject values into your script any way they see fit.
Also, I think it is a debugging nightmare to code without clearly identifying post, get, session, etc. clearly, at least at the top of my code.