SQL Injection
Are your apps sufficiently protected against SQL injection? Do you currently validate and sanitize all types (strings, numbers) and methods (forms, cookies, query strings) of user input before using it in a database query? If not, it’s only a matter of time before serious pwnage…
This article is good primer for newbies and reminder for gurus…
SQL Injection Attacks by Example
If you aren’t already using prepared statements, now’s as good a time as any to start: