In reply to Rick.

Incidentally there are some free audit applications I remember one called like Wapiti or something along those lines. Perhaps some searches might result in others that someone could post up here at WP Tavern and get word "spread" that vulnerability scanners should be run against code and indeed sites making for a better world!