register globals may be on, please switch this setting off (look at php.net for details, specificall ini_set() function )