From Harry Fuecks' weblog this morning, there's a link to even more information on PHP Security from the WACT Wiki.

The WACT Wiki now has a page about Php Application Security which (I assume, judging from the style) Jeff added. Right now it's a pretty much a checklist for things to watch out for, plus links to many a bedtime read (or not if you like to sleep well). There's actually quite a bit of information here, and any PHP coders, from newbies to gurus, could benefit from checking it out...