Checklist

Checklist: Ten dos and don'ts for secure coding

Do validate all user input
Do escape input values
Do fail Safe
Do treat sensitive security information with care
Do practice defense-in-depth
Don't provide hints to hackers
Don't add comments telling what the code does; say why the code does what it does
Do study code patterns
Do make (code) buddies
Don't just fix defects, study them

Download this checklist (PDF)


This was first published in March 2006

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.