Learn from others mistakes: How not to write a PHP install script 
I had a look at an install script of a piece of PHP software and found several interesting security mistakes.
Tags: php, vulnerabilities, security, https