The Open Web Application Security Project's (OWASP) Top Ten has been one of the most useful and clear summaries of the risks faced by web apps of all kinds. At the end of 2017, it was revised and updated in some interesting ways.

In this talk we'll cover what's in that list of the top 10 security threats to your web app. We'll also cover how we can write and maintain our applications better in light of the list, and what other threats you may want to consider when security of your PHP site comes to mind.