Here's a good start: https://paragonie.com/blog/2017/12/2018-guide-building-secure-php-software https://paragonie.com/blog/2017/12/2018-guide-building-secur...

Here's a good start: https://paragonie.com/blog/2017/12/2018-guide-building-secure-php-software https://paragonie.com/blog/2017/12/2018-guide-building-secur... The big issue with PHP's security is that there are a lottt of old guides and stackoverflow answers out there with terrible, unsafe practices.