note 31671 deleted from security.registerglobals by alindeman

I hate being the one to throw molasses on the chickens. but other than causing a few more steps to be taken by some unpleasant fellow trying to change a value on a web page.. I don't see how this really has upped security. Sure if you use GET METHOD it's a snap to change a value. Use to use it all the time to test functions quickly in my apps. But on a test, I wrote a quick form, then viewed the source in my browser, edited the values I wanted and saved to to my drive. then pointed my browser at my fake form and did a submit. With Register_globals = Off it took my data and modified the form exactly how I wanted it to. And tweaking cookies is possible too. So the question becomes what real value other than giving you a chance to use $HTTP_REFERER to ensure the form submission actually came from a browser viewing the site. Seems to me you up the security just by making sure $HTTP_REFERER matches the file it's suppose to be coming from far better than this deal. So help me understand. Thank you very much. Mare