Where can I find a web-project "security checklist?"
php, security, xss
Solution
Check out this link "Seven habits for writing secure PHP applications":
http://www.ibm.com/developerworks/opensource/library/os-php-secure-apps/index.html
The IBM articles are always very useful, thanks.
PS: also this "Recommended PHP reading list"
http://www.ibm.com/developerworks/opensource/library/os-php-read/#security
Problem
I'm looking for a complete list of security guidelines for programming and deploying PHP web sites and applications on an Apache (Linux) server. Basically, a "security check list" to run through before finishing a project. I.e., - Cross Site Scripting - Cross Site Request Forgery - Sanitize form data that goes into database - Disable register globals and error reporting in custom php.ini - Upload files below web root ...(the list goes on) I did some searching on the internet and in this forum, but couldn't find a comprehensive, succinct, and complete list of guidelines. Thanks in advance.