PHP Security: Top 5 from OWASP

OWASP is pleased to announce the immediate availability of the OWASP PHP
Top 5. The OWASP Top 5 is an education piece which provides up to date
advice to PHP developers, hosters, and other PHP users. The PHP Top 5 is
produced by the OWASP PHP Project.

The PHP Top 5 is based upon attack frequency in 2005 as reported to
Bugtraq. This information is a valuable insight into the most
devastating attacks against the world's most popular web application
framework.

In 2005, OWASP collaborated with SANS to research and write a completely
new PHP section for their successful SANS Top 20 2005. The OWASP PHP Top
5 is the full unabridged text, updated to reflect recent XSS attacks and
SQL injection vectors.



OWASP PHP Top 5

http://www.owasp.org/index.php/PHP_Top_5



OWASP PHP Project

http://www.owasp.org/index.php/Category:OWASP_PHP_Project