PHP Security
A few good links for php web security:
-
The "Top Ten" web design security mistakes and some sample code to prevent many of them:
http://www.sklar.com/page/article/owasp-top-ten
-
The PHP online document has some more info:
http://ca.php.net/manual/en/security.variables.php
-
Security related in an obtuse sort of way (especially for those on shared web hosting) - a PHP obfuscator that doesn't require any PHP modules to be installed:
http://pobs.mywalhalla.net/
-
Most handy scan for eval() - http://www.gregfreeman.io/2013/how-to-tell-if-your-php-site-has-been-compromised/ -
find . -type f -name '*.php' | xargs grep -l "eval *(" --color