What are some good sites with info about security problems and how to fix them?
http://www.w3.org/Security/ http://www.owasp.org/
And others from the first page of hits on Google.
Another useful security site - PHP Security Consortium