A terrific and free resource for introducing developers to web application security concepts is a video tutorial series from OWASP. Jerry Hoff is the leader on this tutorial project. The first two episodes are complete -
AppSec Basics and
Injection Attacks. The videos are very well done, with nice graphics, sound, and animation.