note 25906 deleted from security.globals by philip

Note Submitter: sorry, too much spam ---- If you are forced to have register_globals=on because of old code, but you are starting a new project and you want to make sure you don't accidentally use global vars in your new code, you can run this snippet to unset any global vars that were set. $arr = array_merge(&$_ENV,&$_GET,&$_POST,&$_COOKIE,&$_SESSION); while(list($key) = each($arr)) unset(${$key}); I am sure this does not provide any extra security, and is certainly not as effective as setting register_globals=off, but should keep you from writing more 'bad' code by forcing you to use super globals. Anybody have a better way? please post