I only have limited knowledge in PHP but from the advice I've gotten, it seems that creating your own CMS as someone suggested is a good start as it covers a lot of the fundamentals including security such as escaping certain things to prevent exploits and so on.