@NogDogMay 23.2008 — #$_SERVER['HTTP_REFERER'] and $_SERVER['REMOTE_ADDR'], although note that the http-referer header is optional and is never guaranteed to be set (plus can be easily spoofed).
@NogDogMay 23.2008 — #In my php.ini file the register_global is on but in my phpinfo it shows that is off how it is that possible ? [/quote] Option 1: You modified the wrong php.ini file (see which file the phpinfo() data says it's using.
Option 2: You have a local per-directory override in a .htaccess file.
Option 3: I don't know.
In any case, since register_globals is deprecated and will not even be an option in PHP 6, it would be best to turn it off and write your code to not depend on it. (After all, they deprecated it and made the default setting "off" for a reason.)