cheers m8.. didn't think it would be that easy to sort..
speaking arrogantly:
can't surpass just set register_globals & allow_url_fopen off as default
(especially regarding PHP 5 being as php.ini files don't work with it)
if users then need register globals on &or fopen enabled, then they should be the ones that need the php directives lol (y make us security conscious people be the ones to suffer)
it would save us all the hassle and is much more secure anyway.
scripts that don't work with them disabled should be rewritten to work by the developers.. it would surely encourage them to write their scripts properly and safer.