Anyone programming with PHP should read the following article from the folks at php.net which explains the security implications of setting the register_globals directive to ON.  It is an excellent discussion on the exposure resulting from register_globals = ON.

http://us3.php.net/manual/en/security.globals.php