This project seems to have a good handle on several things: http://www.owasp.org/ 1.0 release of their "Guide to Building Secure Web Applications and Web Services" document: http://www.owasp.org/guide/index.shtml -- =============================================================== Tres Seaver tseaver@zope.com Zope Corporation "Zope Dealers" http://www.zope.com