10 (very) Basic Tips for PHP Web Application Security - Rusty Razor Blade : Includes some common sense tips like not using formmail - can form the basis for a checklist for PHP Web App Security.