You can also look up for these other topics: Framework Coding Standards Boilerplate CMS Tool Security Hacktoberfest
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.