大牛的博客

http://www.laruence.com/2008/10/28/567.html/comment-page-1#comment-179916

http://www.80sec.com/cross_domain_attack.html畅谈web安全

http://www.walu.cc/phpbook/2.1.md深入分析php实现