My OSCON tutorial, PHP Security, was a big hit. The workbook for the tutorial is likely the most complete source of PHP security information and best practices available (until my book, PHP Security, is published).

Here it is: php-security.pdf (248 KB, 55 pages). I hope you find it helpful.