note 31671 added to security.registerglobals

I hate being the one to throw molasses on the chickens. but other than causing a few more steps to be taken by some unpleasant fellow trying to change a value on a web page.. I don't see how this really has upped security. Sure if you use GET METHOD it's a snap to change a value. Use to use it all the time to test functions quickly in my apps. But on a test, I wrote a quick form, then viewed the source in my browser, edited the values I wanted and saved to to my drive. then pointed my browser at my fake form and did a submit. With Register_globals = Off it took my data and modified the form exactly how I wanted it to. And tweaking cookies is possible too. So the question becomes what real value other than giving you a chance to use $HTTP_REFERER to ensure the form submission actually came from a browser viewing the site. Seems to me you up the security just by making sure $HTTP_REFERER matches the file it's suppose to be coming from far better than this deal. So help me understand. Thank you very much. Mare -- http://www.php.net/manual/en/security.registerglobals.php http://master.php.net/manage/user-notes.php?action=edit+31671 http://master.php.net/manage/user-notes.php?action=delete+31671 http://master.php.net/manage/user-notes.php?action=reject+31671