I have been doing some trawling for security checklists and other web app related security documents and I have come across some web pages that I have found fairly useful. I will add to this list as and when I find more;
Apache
PHP
- Securing PHP
- Why $_REQUEST is dangerous
- 7 PHP security blunders
- Web App security checklist
- Hardening PHP
