25 Sep 2002 A Guide to Building Secure Web Applications The Open Web Application Security Project has a guide with a bunch of notes on security.