The register_globals feature is currently required for OCS 1.x only; the 2.x versions of the suite do not use it. We'll be releasing OCS 2.0 soon and it won't require register_globals either.
In the meantime, OCS 1.x should be secure from global variable attacks.
Public Knowledge Project Team
Don't miss the First International PKP Scholarly Publishing Conference
July 11 - 13, 2007, Vancouver, BC, Canada