thanks for the info - it makes sense now. its a similar issue to non-declared vars in js as you mentioned, but even then that was not a language fault per-se, it's just a lack of knowledge about the language.

i can't think of things that actually come up like that in php these days - things like register globals and magic quotes are long gone..