What are some common pitfalls to avoid when working with PHP scripts and register_globals off?

When working with PHP scripts and register_globals off, a common pitfall to avoid is relying on global variables that are no longer automatically registered. To solve this issue, you can use the $_REQUEST superglobal array to access form data and query string parameters instead. 

$username = isset($_REQUEST['username']) ? $_REQUEST['username'] : '';
$email = isset($_REQUEST['email']) ? $_REQUEST['email'] : '';

Keywords

register_globals security vulnerabilities global variables superglobals data injection

Related Questions