Pro PHP Security is one of the first books devoted solely to PHP security. It will serve as your complete guide for taking defensive and proactive security measures within your PHP applications. (And the methods discussed are compatible with PHP versions 3, 4, and 5.)
The knowledge you’ll gain from this comprehensive guide will help you prevent attackers from potentially disrupting site operation or destroying data. And you’ll learn about various security measures, for example, creating and deploying “captchas,” validating e-mail, fending off SQL injection attacks, and preventing cross-site scripting attempts.
About the Author
Michael Southwell is a retired English professor who has been developing websites for more than 10 years in the small business, nonprofit, and educational areas, with special interest in problems of accessibility. He has authored and co-authored 8 books and numerous articles about writing, writing and computers, and writ (click here for further information)
Related posts:

4.0 out of 5 stars
Securing systems & Securing code
I found Pro PHP Security a very informative book. I received this book around the same time that I began developing online financial software.
3.0 out of 5 stars
Good info, not many solutions
Like the title states this book tells you about a lot of security issues you should be aware of, but doesn’t go in depth for many solutions.
1.0 out of 5 stars
Very little about PHP security at all
The book is entitled PHP security. But the actual content covers very little PHP at
all: less than 20 percent.
5.0 out of 5 stars
Finally a good book on PHP security issues
PHP applications written without a concern for security risk cross-site scripting, SQL injection, session hijacking, and a multitude of other potential problems.