RE: Policy on Web Applications

["David Johnson" <djohnson@jsatech.com>]

When we developed our application we did not know that in PHP it was
possible to turn off register_globals.  It was obvious to us that while
advantageous for quick development, globals were a big security issue, so we
designed our entire app using classes, and explicity stating where we want
to use globals and verifying them accordingly.   

We could re-code to not use globals, but we're focusing our recoding in
other technologies instead of PHP.  
 
I did not know we could turn on PHP global in an Apache virtual host
directive. This is great for this version of the package.  Thanks for the
feedback.