Hola usando estas funciones, que riesgo corro en tener problemas de seguridad, es necesesario usar extract() o hay alguna manera mejor de convertir las variables superglobales (array) en trozos de variables.

Good, there is some risk in using the function extract in the superglobal variables as $_POS and $_GET, I work of the following way.

There is risk of SQL INJECTION or there is an alternative to extract

if ( get_magic_quotes_gpc() ) {
 $_GET = stripslashes( $_GET );
 $_POST =stripslashes( $_POST );
}

  function vars_globals($value = '') {
   if (is_array ( $value ))
        $r = &$value;
    else
        parse_str ( $value, $r );

      return  $r;
   }

   $r = vars_globals( $_GET );

    extract($r, EXTR_SKIP);