It’s very hard today to secure web sites. Development cycles are becoming shorter, technologies keep coming and many sites become disposable. The good practices described are a minimum for all websites with sensitive sections.