Good resource for PHP and MySQL security?

PHP, MySQL, Sessions, Authentication, Security,

[cphillips]

I am looking for a very good "real world" resource on PHP sessions and MySQL.

I want a nitty-gritty guide or checklist to make sure I am not leaving any holes open in my "secure" area of my website. (and/or a "best practices" for the real world resource)

Something that would directly relate to logins, sessions, user control panels, user group permission, (and how to implement them) is really what I am looking for.

Does anyone have any suggestions?

Thanks for your time!

[Timotheos]

Chris Shifflet is the PHP guru on security. He has a lot of good articles at his web site [shiflett.org....] Here's an example article on sessions [shiflett.org]. You might want to check out the PHP Security Consortium [phpsec.org] too.