I can't believe people didn't check out their scripts!
As for osCommerce, they had a fix for register globals being off when i played about with it 3 years ago!
I thought it was recommended as being off for security issues
- people should try and update their sites once in a while.
