[Jon]

Yes you can turn register globals off in your php.ini and/or depending in server configs you can toggle them in conf files. The catch... I'm not sure x-cart would function with them off however Been so long since I installed I don't recall.