In this post George reiterates the dangers of using register_globals and remote includes. A classic example of where PHP is just too friendly. Thankfully, recent versions of PHP have register_globals turned off by default.