To all the good security concious programmers, please provide tips to protect a website from hackers.

I'm into java.

Which language are we looking at here.

ToyinDipo: To all the good security concious programmers, please provide tips to protect a website from hackers.

Simple, learn about how to hack a website

There is no foolproof way to protect your website, but sanitizing inputs at the client side is one way. Where are the security guys and gals on Nairaland?

A perfect input validation-thats the best way to obey the certain rule of thumb which says never trust the user. Pls don't quote this rule on your site only in your codes(like twitter stylishly putting away the hacker). The tasking fact here is user input basically are html form elements sent through get or post. Javascript is the best yet weakest means of user input validation.
It becomes more difficult for a novice when you tell him that session variables are also a part of such inputs at the same time, sessions are susceptible via cookies. The address bar is just another loop hole that is mostly handled via .htaccess files. Its a line of serious business. I'm even considering the employment of a special staff to handle such. So other things will be done freely without panic. But i sincerely think what we should discuss are the best validation rules and regular expressions also url validation and control plus cookies and session validation

Kidstell: A perfect input validation-thats the best way to obey the certain rule of thumb which says never trust the user. Pls don't quote this rule on your site only in your codes(like twitter stylishly putting away the hacker). The tasking fact here is user input basically are html form elements sent through get or post. Javascript is the best yet weakest means of user input validation.
It becomes more difficult for a novice when you tell him that session variables are also a part of such inputs at the same time, sessions are susceptible via cookies. The address bar is just another loop hole that is mostly handled via .htaccess files. Its a line of serious business. I'm even considering the employment of a special staff to handle such. So other things will be done freely without panic. But i sincerely think what we should discuss are the best validation rules and regular expressions also url validation and control plus cookies and session validation

Thanks bro, I would take note of those when I return to programming.

Since when did you quit coding. Well as an addition regular expressions are very good validator methods

early last year, I am presently working on oracle 11g db development.

I think the best way is to learn hacking then you will get a better view of it,....just as others have said validating all inputs is a MUST dont always trust what is coming from users/your website all inputs should be sanitized and validated.

How do you treat/validate/sanitize your session variables

adewasco2k: I think the best way is to learn hacking then you will get a better view of it,....just as others have said validating all inputs is a MUST dont always trust what is coming from users/your website all inputs should be sanitized and validated.

please kindly post 1||2 useful articles about hacking that can help to enhance security consciousness of a web app dev.