Chris Shiflett hit the nail on the head with is top two PHP security practices article. While he points out that these are not the only two things you can do, it's two of the biggest.
I've used a method for some time to clean out my GET variables. POST variables are handled on [...]