note 26488 added to security.registerglobals

One can even set it per directory, in Apache's .htaccess file: php_flag register_globals on Of course, only to make complex old code run! Likewise I would think one can disable it, in case one cannot control php.ini on a shared web server and wants the setting to be off while the server's administrator wants the keep the old default. -- http://www.php.net/manual/en/security.registerglobals.php http://master.php.net/manage/user-notes.php?action=edit+26488 http://master.php.net/manage/user-notes.php?action=delete+26488 http://master.php.net/manage/user-notes.php?action=reject+26488