note 47670 deleted from security.globals by danbrown

Note Submitter: ryanwray at gmail dot com ---- In reply to ben at nullcreations dot net: This is true of the super-global $_SESSION, as it will always be processed last (it is not considered in variables_order directive) However, it is possible to over-write other data, namely GET, POST, COOKIE, ENVIROMENT and SERVER. Of course, what you can overwrite will depend on the directive variables_order - by default, you could overwrite GET and POST data via COOKIE (because cookie data is processed last out of the three which should not really be of great concern. My below code is irrelevant unless extract or another method which does the same thing (ie. I have seen variable variables used before to reach the same affect) is used.