Modern web development has many challenges, and of those, security is both very important and often under-emphasized. While such techniques as threat analysis are increasingly recognized as essential to any serious development, there are also some basic practices which every developer can and should be doing as a matter of course.

Cade and Daniel now move onto a simple but vital technique: ensuring you use parameter binding in your database queries to ensure your database doesn't suffer the ravages of Little Bobby Tables.

See the full article and lots of examples here.