The Open Web Application Security Project

Truth to be told, I would strongly recommend you visit the OWASP website and find out what they have to say:

...