I just published a Hardening Guide for phpList
Sorry it took me so long. Better late than never
Also, fwiw, it looks like @mariana created a distinct thread here to discuss this hardening guide.
