note 38361 added to security.registerglobals

import_request_variables() has a good solution to part of this problem - add a prefix to all imported variables, thus almost eliminating the factor of overriding internal variables through requests. you should still check data, but adding a prefix to imports is a start. ---- Manual Page -- http://www.php.net/manual/en/security.registerglobals.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+38361 Delete -- http://master.php.net/manage/user-notes.php?action=delete+38361&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+38361&report=yes Search -- http://master.php.net/manage/user-notes.php