I am a bit of confused after going through different articles on PHP's register_globals.
I know that, if you have register_globals turned ON, then anything passed in a GET or POST gets automatically translated into a variable in PHP and acts as global variable but still whats the harm doing that(though knowing it can override the variable).
I exactly want to know list of what all harm it can cause, if set to ON?
If its harmful then Why XAMPP has set it to ON, by default?
I have already gone through different discussions on the stackoverflow but still looking for some explanatory answer.
Thanks.