e">$config['allow_get_array']</span></tt> is FALSE (default is TRUE), destroys
the global GET array.</li>
<li>Destroys all global variables in the event register_globals is
turned on.</li>
<li>Filters the GET/POST/COOKIE array keys, permitting only alpha-numeric
(and a few other) characters.</li>
<li>Provides XSS (Cross-site Scripting Hacks) filtering. This can be
enabled globally, or upon request.</li>
<li>Standardizes newline characters to <tt class="docutils literal"><span class="pre">PHP_EOL</span></tt>