Another 'Security flaws in PHP' article, somewhat more accessible than this one I mentioned two days ago.
[via drop.org]