I found this info on php.net:
http://php.net/manual/en/security.globals.php

and this article:
http://www.phpbuilder.com/columns/ian_gilfillan20050707.php3