OWASP

Web Security Fundamentals: How to Protect Your Site

Web security fundamentals: common threats, protection layers, and a developer security checklist.