What are the potential security risks of using a global variable like $_SESSION for passing data in PHP functions?

Using a global variable like $_SESSION for passing data in PHP functions can pose security risks because it can be easily manipulated by malicious users. To mitigate this risk, it's recommended to pass data directly to functions as parameters instead of relying on global variables.

// Example of passing data directly to a function as parameters
function process_data($data) {
    // Process the data securely
}

// Usage
$data = $_SESSION['user_data'];
process_data($data);