The issue: register_globals is still used in many applications and even for developing
The solution: Turn off register_globals in development and production environments.
register_globals and magic_quotes will be removen in PHP 6