I want to talk about PHP security for a minute here.
I have a small website I am working on, but I don't want to spend too much time on it yet because I know very little - nothing about how to secure something.
What security measures are necesary or usefull in any way?:
Yahoo's Enter the code (Random picture here)?
Email comfirmation (Push this link)?
Using Sessions instead of Cookies?
etc.
Also, any that you would say are usefull, maybe you could give me the basic logic behind, as I am new to this stuff. I could easily set up a insecure PHP page, but I don't know why I would.