Get the Whitepaper called Assault on PHP Applications.
You can download it from the following link: https://packetstormsecurity.com/files/download/78455/assault-php.pdf
Source: https://packetstormsecurity.com/files/78455/Assault-On-PHP-Applications.html