In a new installation of the Pro::PHP Podcast just released, Paul Reinheimer sits down and talks with Ed Finkler, "web and security archive administrator".
Ed Finkler is also a primary developer on the PHPSecInfo project, an effort to help bring a baseline of security to developers and their applications:
PhpSecInfo provides an equivalent to the phpinfo() function that reports security information about the PHP environment, and offers suggestions for improvement. It is not a replacement for secure development techniques, and does not do any kind of code or app auditing, but can be a useful tool in a multilayered security approach.
Check out some of Ed's own comments about the interview in this new blog entry.