It's a SO article on security for web transactions.
[1] https://stackoverflow.com/questions/549/the-definitive-guide...