An essential checklist, but there is more ...,
Verified Purchase(What is this?)
This review is from: Essential PHP Security (Paperback)
This book is by no means a tome and was probably written for kindle first.
That said, it highlights a lot of the important concepts of filter input and escape output. If you do that, you've probably covered 85% of the problems.
The book also covers cookie interception and SQL injection, but the Internet will also give the same.
It won't take long to read the book, but perhaps as long as your code is written with 'security in depth' again you're most of the way there.
Given four stars for what's in the book, but more guidance and examples would have been welcome.