I don't know what your platform is - if you search for your code/db environment and best practices you will find some insight, read a few and determine what mak

I don't know what your platform is - if you search for your code/db environment and best practices you will find some insight, read a few and determine what makes sense. Generally you don't trust any input, filter anything whether it is a page link or a form field, be mindful of what you put in your database and what you serve back will not cause any problems - how external input communicates to the outside world (HTML, PDF, email, links, etc.) Get as much of your code below web root. Use SSL. Setup regular backup and test it. Keep your code environment updated (but not bleeding edge - too new can be vulnerable too)