Cookies injecting data into the global namespace?  Hmm, sounds familiar... <a href="http:&#x2F;&#x2F;php.net&#x2F;manual&#x2F;en&#x2F;security.globals.php" rel="nofollow">http:&#x2F;&#x2F;php.net&#x2F;manual&#x2F;en&#x2F;security.globals.php</a>