Don't allow extract() to overwrite $GLOBALS or $this

Summary: CVE-2011-0752

Reviewed By: @markw65

Differential Revision: D1536049

Pulled By: @ptarjan