Links
We-Create's PHP Security Links
W3C Form Guidelines
REST and the Real World
Wesabe Privacy Wall
Beating Bank of America's Anti-Phishing protection
Adult content beats Hotmail CAPCHAs
Make Wrong Code Look Wrong
XSS FAQ
19 Deadly Sins of Software Security review
DeXSS packages
Chris Shiflett's blog
php|architect's guide to php security