From 9ae33f4f18ba39bc5cd73df279019cc87167e0f8 Mon Sep 17 00:00:00 2001
From: Matt Mullenweg <matt@git.wordpress.org>
Date: Tue, 9 Aug 2005 08:26:54 +0000
Subject: [PATCH] Turn register globals off. Hat tip: Christian Schmidt

git-svn-id: https://develop.svn.wordpress.org/trunk@2768 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-settings.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/wp-settings.php b/wp-settings.php
index 2529187058..f7bcb0fc29 100644
--- a/wp-settings.php
+++ b/wp-settings.php
@@ -3,6 +3,10 @@ $HTTP_HOST = getenv('HTTP_HOST');  /* domain name */
 $REMOTE_ADDR = getenv('REMOTE_ADDR'); /* visitor's IP */
 $HTTP_USER_AGENT = getenv('HTTP_USER_AGENT'); /* visitor's browser */
 
+// Turn register globals off - Christian Schmidt
+foreach ( array_merge($_REQUEST, $_SERVER, $_ENV) as $name => $value )
+	unset($$name);
+
 // Fix for IIS, which doesn't set REQUEST_URI
 if ( empty( $_SERVER['REQUEST_URI'] ) ) {
 	$_SERVER['REQUEST_URI'] = $_SERVER['SCRIPT_NAME']; // Does this work under CGI?
@@ -69,6 +73,8 @@ $tablelinkcategories = $wpdb->linkcategories;
 $tableoptions = $wpdb->options;
 $tablepostmeta = $wpdb->postmeta;
 
+$wp_filters = array();
+
 require (ABSPATH . WPINC . '/functions.php');
 require (ABSPATH . WPINC . '/default-filters.php');
 require_once (ABSPATH . WPINC . '/wp-l10n.php');