I'm assuming you have little to no experience whatsoever... in which case, all you should/need to do is install Ubuntu as mentioned above, and install (via Ubuntu's wonderful package management system, or using apt if you know how to grok it) apache2 and whatever addons (php, mysql database, etc) you need to get all the functionality you need.
As far as network security is concerned, it really depends on what you intend to do. At a basic level for your users, all you really need is a simple SSL setup. But if you want to look into more advanced things (i.e. people breaking into your system), then that'll require a lot more research and work. That said, unless you're running some super special commercial site that holds tons of sensitive data, you wouldn't really need anything beyond SSL and a good firewall.