register_globals on or off?

[safire]

I am currently trying to set up the osCommerce php files and the first thing I came across was this error:

FATAL ERROR: register_globals is disabled in php.ini, please enable it!

I searched the forum and found a few threads that addressed this issue, but I am still in need of some help. I am conflicted as wether to continue with the advice stated in this forum to turn the register globals on when everyone else states that it would be a security issue.

Is the code for osCommerce safe to use with the register_globals on? This store will need to be secure and I don't want to be opening up a big security issue that will lead to a problem in the future.

Does anyone have any feedback on this issue? I am getting conflicting answers and I figure to come to the source to get a direct answer.

Thank you for your help!

[Arpit]

turning register globals on should be avoided as far as possible....

having register_globals set to OFF, a variable say $foobar will not have a value unless and untill

 $foobar = $HTTP_POST_VARS[foobar];

$foobar is null.

php5 by default will have register globals turned off and from the looks of it, it COULD be even deprecated...

read this, http://us2.php.net/manual/en/security.globals.php