Hi timmy,

PHP will come under the web application, so we have to concentrate more on SQL and Java injection. other than this we have to do penetrate testing for the login page.