I’ve rewritten QuickBlog (well, more of a temporary shim at the moment), to work with PHP if register_globals is off.
I’m going to go back through and dissect the code, ensuring to drop off the unnecessary debugging and such, but for now, it works fine with register_globals turned off, and I have security set in place for poisoned data. Yaaay!