Pro PHP Security - Snyder, Chris (Chris Snyder and Michael Southwell, 2005)