security may be an issue on that last one, depending on how they have php setup it may be an invitation to be hacked...is it too much to ask a hosting provider to turn register globals off???