« Deserialization from BSON
Request Injection Attacks »
PHPTS：一键免费搭建 Nginx + PHP + MySQL 运行环境
PHP Manual
MongoDB
Security
Security
Request Injection Attacks
Script Injection Attacks