The document discusses security best practices for PHP and MySQL web applications. It covers securing MySQL configurations, using encryption and access privileges appropriately. For PHP, it recommends filtering all external data, considering potential attacks like SQL injection, XSS, session hijacking and code injection. It provides examples of each attack and methods to prevent them, such as prepared statements, output encoding and regenerating session IDs.

1. PHP and MySQL Web App Security Laura Thomson (laura@omniti.com)

2. Why is web application security important?

6. MySQL Security Basics

11. PHP Security Basics

14. Attacks