Securing PHP

  http://www.securityfocus.com/infocus/1706