Hi, I'm new here but anyways, I need some help. I'm not sure how register_globals work exactly. If I'm correct, when register_globals is on, passing a variable in the URL will default it to that example: http://www.mywebsite.com/?id=4 will make the $id set to 4. But does can users input $_POST variables or $_SESSION variables through the URL also? Because I have a website that is like http://www.mywebsite.com/profile.php?id=65 and changing the id to another number goes to their profile.php page, and if they would do the same just for the login page, would $_POST datas be catched? like... http://www.mywebsite.com/login.php?username=billy&password=bob