register_globals should be set to off for security reasons