One of the PHP security gurus “Chris Shiflett” has put his OSCON tutorial workbook (in .pdf format) on the web. You can get it from his site (http://shiflett.org/) or here (http://shiflett.org/php-security.pdf)
At only 55 pages it is a very good read for beginners and a nice refresher for experienced programmers.