PHP has become the most popular application language on the web, but common security mistakes by developers are giving PHP a bad name. Here's how PHP coding errors have become the new low-hanging fruit for attackers, contributing to the phishing problems on the web. PHP became one of my favorite languages because of how quickly …
PHP Security Guide
PHP application security is a total mess. For fun one night I jumped on Source Forge and looked for PHP apps with remote exploits. I found a remotely exploitable hole in the first application I downloaded. I was so disgusted I ended up writing a guide for newbies to avoid some common security mistakes.