* Implemented Stefan Esser's unregister_globals(). What this does is reverse the effects of register_globals by unsetting any globals that were instantiated as a result of register_globals being enabled. * Fixed SQL injection vulnerability in search.php (only exploitable with register_globals enabled).