Surtout, ne pas croire que la sécurité n'est pas un souci! Dans ce domaine, prévoir vaut mieux que guérir.

register_global off

safe mode on

phpinfo à désactiver

cloisonnement php

php5

Securing PHP Step-by-Step : http://www.securityfocus.com/infocus/1706

Writing Secure PHP, Part 1 : http://www.ilovejackdaniels.com/php/writing-secure-php/

Writing Secure PHP, Part 2 : http://www.ilovejackdaniels.com/php/writing-secure-php-2/

Writing Secure PHP, part 3 : http://www.ilovejackdaniels.com/php/writing-secure-php-3/

Hardened-PHP Project : http://www.hardened-php.net/

Guide de sécurité PHP : http://phpsec.org/projects/guide/fr/

Securing MySQL: step-by-step : http://www.securityfocus.com/infocus/1726

Apache 2 with SSL/TLS: Step-by-Step, Part 1 : http://www.securityfocus.com/infocus/1818

Apache 2 with SSL/TLS: Step-by-Step, Part 2 : http://www.securityfocus.com/infocus/1820

Apache 2 with SSL/TLS: Step-by-Step, Part 3 : http://www.securityfocus.com/infocus/1823