http://shiflett.org/talks/phpworks2004/php-session-security


http://shiflett.org/talks/oscon2004/securing-php-sessions


http://shiflett.org/talks/oscon2004/php-security


http://shiflett.org/php-security.pdf


http://shiflett.org/php-session-security.pdf


http://shiflett.org/articles/the-truth-about-sessions


http://wact.sourceforge.net/index.php/PhpApplicationSecurity


http://shiflett.org/books/http-developers-handbook


http://shiflett.org/books/php-security


http://www.phparch.com/