PHP Security

[Valken]

Well, someone hacked my crappy webpage on Christmas day and nuked half of my site.

The prob was me being careless and not securing my PHP scripts and whatnot.

Can anyone point me to some decent resources for learning about PHP security or would I be better off biting the bullet and buying a PHP book?

[Valken]

Nevermind... it turns out my scripts were secure enough. PHP.net's got a pile of crap that turned out to be useful, stuff I did subconsciously. The problem was that a malicious user on the same server can view, and exploit scripts belonging to other accounts even when they aren't available by web requests.

*annoyed*