To Authors - web security

[Pratik Mutha]

I have very generic questions.

what are the commonly used patterns for web security?

what are the BEST practises for implementing web security ?

Thanks in advance.

Pratik
[ January 12, 2006: Message edited by: Pratik Mutha ]

[Christopher Steel]

Pratik,
I hate to be too blatantly self promoting, but "buy the book". ;-)
The common patterns I use for web apps are Secure Pipe, Secure Logger, Audit Interceptor, Intercepting Validator, Intercepting Web Agent, Authentication Enforcer, Authorization Enforcer and a few others. The best practices are too numerous to list here. Check out the website: http://www.coresecuritypatterns.com

[Pratik Mutha]

Thanks Chrishtopher for the information.