note 8321 added to session_register

What we *really* need is a session_register() for variables which can be modified both within the script *and* by the user through a GET or POST and a seperate session_register_protected() for those variables which the user is not allowed to modify directly (in other words, which behaves exactly the way the current session_register() does). Maybe someday... http://www.php.net/manual/function.session-register.php