I’ve just completed a review of Howard and LeBlanc’s new book:

http://www.greebo.net/?page_id=325

I was expecting something else, and I’m a bit disappointed. But that’s okay, it’s still a great book for the PHP and Java programmers out there. I just think Writing Secure Code and OWASP Guide 2.0 is a better reference for significant projects.

Andrew