Wtf is going on?

2

try

print "<h1>".$_POST['test']."</h1>";

That’s a feature called Register Globals, which is now off by default.