php security guide

Table of contents :
PHP Security Consortium: PHP Security Guide……Page 1
Table of Contents……Page 2
Basic Steps……Page 3
Register Globals……Page 4
Data Filtering……Page 5
The Dispatch Method……Page 6
The Include Method……Page 7
Filtering Examples……Page 8
Error Reporting……Page 10
Spoofed HTTP Requests……Page 12
Cross-Site Scripting……Page 14
Cross-Site Request Forgeries……Page 17
Exposed Access Credentials……Page 22
SQL Injection……Page 23
Session Fixation……Page 26
Session Hijacking……Page 27
Exposed Session Data……Page 31
Browsing the Filesystem……Page 34
More Information……Page 37