Today, I have turned off register_globals in PHP. For those of you who don't know what this is you can find tons of stuff on Google about it. Back when I learned PHP in 3.0 it was accepted coding practice to use, after a string of security issues it became bad practice. Now in PHP 6.0 they plan to remove it completely.

I haven't coded anything with it for years but many old systems like Clans relied heavily on it. This has all been changed in recent updates. We were never directly affected by any security issues stemming from this feature but they were there, and had this game been open source they would have no doubt been exploited.

I have had it turned off on Dev now for a couple of weeks and all issues we found were fixed. No doubt we will of missed some things though. If you find any problems on main please report them in a ticket.