This talk: http://shiflett.org/talks/phpworks2004/php-session-security


Securing PHP Sessions (OSCON2004): http://shiflett.org/talks/oscon2004/securing-php-sessions


PHP Security Tutorial (OSCON2004): http://shiflett.org/talks/oscon2004/php-security


PHP Security Workbook: http://shiflett.org/php-security.pdf


PHP Session Security Workbook (Coming Soon): http://shiflett.org/php-session-security.pdf


The Truth about Sessions: http://shiflett.org/articles/the-truth-about-sessions


WACT PHP Security Wiki: http://wact.sourceforge.net/index.php/PhpApplicationSecurity


HTTP Developer's Handbook: http://shiflett.org/books/http-developers-handbook


PHP Security (O'Reilly - Coming Soon): http://shiflett.org/books/php-security


Security Corner in php|architect: http://www.phparch.com/