"the way it's supposed to be done"

[phlow]

does anyone know a tutorial which includes the DOs and DON'Ts of dynamic-webpage-building?
don't missunderstand this: i'm not looking for a beginner tutorial for webdesign but for an (semi-)professional one featuring advanced information about how certain issues (content-management, forum, community) are supposed to be handled in php with regards to flexibility, security and speed.

thanx, Phlow.

[scoppc]

The best place for this will be security sites whereby you can find lots of information on security.

Below are some articles from securereality.com, check em out:

• SRADV00001 - Arbitrary File Disclosure through PHP File Upload
  http://www.securereality.com.au/sradv00001.html

• SRADV00003 - Arbitrary File Disclosure through IMP
  http://www.securereality.com.au/sradv00003.html

• SRADV00006 - Remote command execution vulnerabilities in phpGroupWare
  http://www.securereality.com.au/sradv00006.html

• SRADV00008 - Remote command execution vulnerabilities in phpMyAdmin and
  phpPgAdmin
  http://www.securereality.com.au/sradv00008.txt

• SRADV00009 - Remote command execution vulnerabilities in phpSecurePages
  http://www.securereality.com.au/sradv00009.txt

• SRADV00010 - Remote command execution vulnerabilities in SquirrelMail
  http://www.securereality.com.au/sradv00010.txt

• SRADV00011 - Remote command execution vulnerabilities in WebCalendar
  http://www.securereality.com.au/sradv00011.txt