There used to be a question on SO to the effect of "If even Jeff Atwood can make (insert some grave mistake here), what do I need to take into consideration when building a secure web site?"
I found that a very useful resource to point people to who ask about "how do I make xyz totally secure".
I would like to flag it for a historical lock, but it's no longer visible - the great weakness of the "let people who care about them make a case for undeletion" approach. But that's a different discussion.
Could someone point me to the right URL?