This is a broad question in search of a decent broad answer, but I am really curious about which key issues professional developers must account for in terms of security.
How do you make your website more hacker-proof? How do you ensure the security of your companies’ databases?
I’m a real noob with security issues but I am keen to hear from people about typical design patterns for security (if there is such a thing), the ease of using encryption methods etc.
Thanks!
Web Application
Never trust user input! Assume people are trying to pass malicious content to your application.
This kind of thing leads to the issues that @Matteo Mosca is talking about.
Database
On the database side make sure you encrypt any information you don’t want people to easily see if they do hack your DB (passwords etc)
Here is a good article on storing passwords in your db.
Links for more info: