(relative to the source code layer)
PHP's register_globals often violates non-mutability of critical variables
modification of cookies or hidden form fields often violates the programmer's expectation that
cookies cannot be modified