http://shiflett.org/talks/oscon2004/securing-php-sessions


http://shiflett.org/talks/oscon2004/php-security


http://shiflett.org/php-security.pdf


http://shiflett.org/articles/the-truth-about-sessions


http://wact.sourceforge.net/index.php/PhpApplicationSecurity


http://shiflett.org/books/http-developers-handbook


http://shiflett.org/books/php-security