I put together a couple scripts to test out chorizo scanner during our PHP UG meeting tonight.
Now I'm not saying that I always write 100% secure scripts, but intentionally writing vulnerable scripts which demonstrate vulnerabilties which aren't entirely stupidly obvious is REALLY difficult.
Anyway, we're having a security talk by Tom ...