Security

• Always validate CSRF tokens on forms

• Enable HTTPS in production environments

• Sanitize user input before database operations

• Never expose sensitive data in public folders

• Use environment variables for sensitive configuration

• Implement proper session management

• Add rate limiting for API endpoints

• Keep dependencies updated

• Follow secure password hashing practices