diff --git a/chapters/security.xml b/chapters/security.xml
index f36ecf4646..1b6925d3a5 100644
--- a/chapters/security.xml
+++ b/chapters/security.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.43 $ -->
+<!-- $Revision: 1.44 $ -->
  <chapter id="security">
   <title>Security</title>
 
@@ -508,7 +508,7 @@ if (!ereg('^[^./][^/]*$', $username))
     access and manipulate databases within PHP scripts.
    </simpara>
    <simpara>
-    Keep in my mind this simple rule: defence in depth. In the more place you
+    Keep in mind this simple rule: defence in depth. In the more place you
     take the more action to increase the protection of your database, the less
     probability of that an attacker succeeds, and exposes or abuse any stored
     secret information. Good design of the database schema and the application
@@ -852,7 +852,7 @@ $result = mssql_query($query);
          <title>A more secure way to compose a query for paging</title>
          <programlisting role="php">
 <![CDATA[
-settype($order, 'integer');
+settype($offset, 'integer');
 $query  = "SELECT id, name FROM products ORDER BY name LIMIT 20 OFFSET $offset;";
 
 // please note %d in the format string, using %s would be meaningless
diff --git a/security/index.xml b/security/index.xml
index f36ecf4646..1b6925d3a5 100644
--- a/security/index.xml
+++ b/security/index.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.43 $ -->
+<!-- $Revision: 1.44 $ -->
  <chapter id="security">
   <title>Security</title>
 
@@ -508,7 +508,7 @@ if (!ereg('^[^./][^/]*$', $username))
     access and manipulate databases within PHP scripts.
    </simpara>
    <simpara>
-    Keep in my mind this simple rule: defence in depth. In the more place you
+    Keep in mind this simple rule: defence in depth. In the more place you
     take the more action to increase the protection of your database, the less
     probability of that an attacker succeeds, and exposes or abuse any stored
     secret information. Good design of the database schema and the application
@@ -852,7 +852,7 @@ $result = mssql_query($query);
          <title>A more secure way to compose a query for paging</title>
          <programlisting role="php">
 <![CDATA[
-settype($order, 'integer');
+settype($offset, 'integer');
 $query  = "SELECT id, name FROM products ORDER BY name LIMIT 20 OFFSET $offset;";
 
 // please note %d in the format string, using %s would be meaningless