=== modified file 'includes/bootstrap.inc'
--- includes/bootstrap.inc	
+++ includes/bootstrap.inc	
@@ -135,8 +135,17 @@ function conf_path() {
  * Loads the configuration and sets the base URL correctly.
  */
 function conf_init() {
-  global $db_url, $db_prefix, $base_url, $base_path, $base_root, $conf;
+  if (ini_get('register_globals')) {
+    foreach (array_keys($GLOBALS) as $key) {
+      $code = ord($key[0]);
+      // we only allow uppercase letters and underscore
+      if ($code > 96 || $code < 65) {
+        unset($GLOBALS[$key]);
+      }
+    }
+  }
 
+  global $db_url, $db_prefix, $base_url, $base_path, $base_root, $conf;
   $conf = array();
   require_once './'. conf_path() .'/settings.php';