Secure your code with this application security resource.

Paper covering the rationale of discovery as much as the process of exploitation.

Information on how to check & implement web site security.

Articles about security from the experts at SPI Dynamics.

PHP information, resources, tips and articles, with a focus on security and best practices.

SecurePHP is a wiki about PHP security.

This article provides five steps to help identify or avoid such security holes in applications written using PHP.

Download this free chapter about PHP from Ivan Ristic's Apache Security book.

PHP is a very easy language to learn, and many people without any sort of background in programming learn it as a way to add interactivity to their web sites. Unfortunately, that often means PHP programmers, especially those newer to web development, are

The methodology used in the preparation of this article is to review all Bugtraq postings containing the word "PHP" and categorize each unique flaw. The author analyzed the most popular flaws / attacks, and researched prevention techniques, resulting in t

A paper that identifies data validation issues in web applications and presents a modular approach to secure validation.

Ian Gilfillan's column explores common security pitfalls to avoid.

In this article Martin explains how to create a secure PHP login script that will allow safe authentication. Features remember-me function using cookies, validates logins on each request to prevent session stealing.

Learn how to prevent spammers from abusing your PHP forms.

This list represents an attempt to collect academic papers on the subject of Web application security sorted by the year of publication.

Ever growing list of links to research papers about web application security. Covers PHP as well as other languages.

Learn how to make your authentication and authorization schemes secure.

A quick guide to a few of the more common PHP security problems and how to avoid them.