Rating: 

The book is a fine foundation but if you poke around you may find other “best practices”. One example, the section discussing “Mitigating SQL Injection Attacks” one can argue against granting the delete privilege to the application user. If the application user can’t delete, use a logical/soft delete by setting a flag on the records to be deleted… this way you also gain an “undelete” option. To physically purge the data, have a separate user/cron job that does so (segregation of duties).

The one odd thing I found is that it feels as if the book can’t decide if it’s a tutorial (bug tracking/source control) or chronicles of the “Flicker Way” (processing email from mobile devices).

All in all, a book to own.