I picked up the PHP Security book by oreilly which has thus far, been a great read. i stopped buying technology specific books because they get outdated so bloody fast. i've weeded for the second time thru my own books probably turfing close to if not well over $1,000 in books the past six months because they are an older version. i look more to the internet for technology based and books for the theory.