Get the Whitepaper called Practical PHP Security.
You can download it from the following link: https://packetstormsecurity.com/files/download/160858/practical-php-security.pdf
Source: https://packetstormsecurity.com/files/160858/Practical-PHP-Security.html