process_form

register globals may be on, please switch this setting off (look at php.net for details, specifically ini_set() function )