Security demands attention, given the frequency of attacks on web sites. This work explains the common types of attacks and how to write code that isn't susceptible to them. It covers such topics as preventing cross-site scripting (XSS) vulnerabilities; protecting against SQL injection attacks; and, complicating session hijacking attempts.