We're running 6.2.1 of UBBT. A security guru has expressed concern to me that our php config has register_globals on. Is it ok as far as UBBT is concerned to set this to off? Any potential problems down the road?

I have seen sites running both way with Threads. The problem running with register global's off from what I have seen if with alot of other software that requires them on.

That version should run correctly with register_globals off. Your security guru is correct, it's better to have that setting off.

It's possible that some improperly written hacks may not run correctly with register_globals off, but fixing that shouldn't be difficult.

True Dave although I was not necessarily talking hacks. I know when I first bought Photopost one of the requirements I beleive was register globals ON. I think now though the proper checks are made to protect things.

Alas though it is always best to be the the cautious side.