There are about 700 million websites. Nearly 40% use PHP. Vulnerabilities in PHP code can be provided with the access not only to information but also to the ability to manage the host machine. In order to protect, you need to know how it works.
The technique of PHP-injections on examples.