http://shiflett.org/talks/oscon2004/foiling-cross-site-attacks


http://shiflett.org/talks/oscon2004/php-security


http://shiflett.org/php-security.pdf


http://shiflett.org/articles/foiling-cross-site-attacks


http://www.sklar.com/page/article/owasp-top-ten


http://wact.sourceforge.net/index.php/PhpApplicationSecurity


http://shiflett.org/books/http-developers-handbook


http://shiflett.org/books/php-security


http://www.owasp.org/