note 58543 added to function.ini-set

You can't use ini_set() to turn off register_globals. They've already been registered. But you can fake it. <?php // Effectively turn off dangerous register_globals without having to edit php.ini if (ini_get(register_globals)) // If register_globals is enabled { // Unset $_GET keys foreach ($_GET as $get_key => $get_value) { if (ereg('^([a-zA-Z]|_){1}([a-zA-Z0-9]|_)*$', $get_key)) { eval("unset(\${$get_key});"); } } // Unset $_POST keys foreach ($_POST as $post_key => $post_value) { if (ereg('^([a-zA-Z]|_){1}([a-zA-Z0-9]|_)*$', $post_key)) { eval("unset(\${$post_key});"); } } // Unset $_REQUEST keys foreach ($_REQUEST as $request_key => $request_value) { if (ereg('^([a-zA-Z]|_){1}([a-zA-Z0-9]|_)*$', $request_key)) { eval("unset(\${$request_key});"); } } } ?> (Based on work by Lazur) ---- Manual Page -- http://www.php.net/manual/en/function.ini-set.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+58543 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+58543&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+58543&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+58543&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+58543&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+58543&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+58543&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+58543&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+58543&report=yes Search -- http://master.php.net/manage/user-notes.php