Improving your application's security
Keeping your application secure can be achieved if we follow some basic rules of software security and implement them tightly in the application's development and production cycles:
- Never trust your user input: As developers of the application, we should make sure that we don't trust any user input. Everything that may come from the user side should be filtered appropriately before it is processed by the application for storage or any other kind of operation that may cause the provided input to be executed.
- Encrypt sensitive data: Any kind of sensitive data should have a strong encryption supporting its storage and retrieval. Having some amount of randomness in generating the encrypted version of the data can help a lot in making it difficult for attackers to get anything useful out of the data, even if they somehow got access to it.
- Properly secure the infrastructure: The infrastructure that is being used to run the application should be secured properly...