WebGoatPHP is a port of WebGoat to PHP and MySQL/SQLite databases.