Set register_globals=off in .htaccess file and add note to INSTALL