note 23090 added to security.registerglobals

If you have globals turned on.. but use important variables like $_server["php_auth_user"] instead of $php_auth_user varible. Would this be effectively secure enough to use this PHP authentication? This assumes all other variables used in a document do not matter or are validated. -- http://www.php.net/manual/en/security.registerglobals.php http://master.php.net/manage/user-notes.php?action=edit+23090 http://master.php.net/manage/user-notes.php?action=delete+23090 http://master.php.net/manage/user-notes.php?action=reject+23090