Creating a webpage with user accounts, what do I need to keep in mind?

Question

I am trying to write a website that has user accounts. There isn\'t much sensitive information other than the password and email address. But I don\'t really understand what I\'

Answer 1

You should:

• encrypt sensitive data
• avoid:
  • avoid sql injection
  • Session hijacking
  • Session fixation

Recommended Reading:

PHP Security Guide