php security
Nice post by John Lim, creator of ADODB about some of what they go through when creating custom apps for the financial industry. There's alot of good stuff in there even for regular sites.
Maybe that should be PHP's slogan. "If it's good enough for banks it's good enough for you!". What do you think?
Also there's a good ADODB tip in the comments about clearing the password string. Sweet.