PHP Register Globals and Security Vulnerability

Register Globals directive is turned OFF from PHP version 4.2. PHP Global Variables Environment variables, GET, POST, Server, Cookie variables are knows as Global Variables. When register_globals directive is turned ON (like what most ISP's did), you can access/set the global variables like $username, $password instead of $_POST["username"], $_POST["password"]. (more…)