If you leave this set to a world-readable directory, such as / tmp (the default), other users on the server may be able to hijack sessions by getting the list of files in that directory.
Inactiver register_globals est recommandé pour des raisons de sécurité et de performances.