“The 2018 Guide to Building Secure PHP Software” is an excellent guide to writing modern PHP applications with security in mind. It covers a bunch of the usual topics, but provides fresher solutions than most other similar guides.
The 2018 Guide to Building Secure PHP Software