it's about time that i've done that :)
here are security best practices named "OWASP Development Guide 2.0"
it is highly recommended to at least review the documet since it has been written by Real proffecionals who are not being paid directly for writing this
