PHP Security: Default Vulnerabilities and Security Omissions(blog.astrumfutura.com)

http://blog.astrumfutura.com/2012/08/php-security-default-vulnerabilities-security-omissions-and-framing-programmers/