05eb0a61_P_Top_Ten_Cheat_Sheet____OWASP__1
[0] A6 Security Misconfiguration [2] Ensure web servers and application servers are hardened XML – Ensure common web attacks (remote XSLT transforms, hostile XPath queries, recursive DTDs, and so on) are protected by your XML stack. Do not hand craft XML documents or queries – use the XML layer. [3] Ensure database servers are hardened [1] 
Ensure web servers and application servers are hardened PHP – Ensure allow_url_fopen and allow_url_include are both disabled in php.ini. Consider the use of Suhosin extension
Difference between revisions of "OWASP Top Ten Cheat Sheet" - OWASP