Description:
------------
When register_globals=Off, people (who have no other choice) would like to use the function import_request_variables().

But this function CAN overwrite the superglobals variables like $_SERVER... and so users can define variables supposed to be "protected".

Reproduce code:
---------------
<?
import_request_variables("g");
echo $_SERVER["REMOTE_ADDR"];
?>

File must be called with ?_SERVER[REMOTE_ADDR]=123

Expected result:
----------------
Expected to see my IP, not "123".