register globals may be on, please switch this setting off (look at php.net for details, specifically the ini_set() function )