Log File

The application must not lock log files unnecessarily. This practice will help you run multiple instances of same application without any clash.

HTML Encoding

Always encode input text by user from a web page. This will help prevent script injection attack and is a good practice from security point of view.

Encrypt cookies

Encrypting contents in cookies is a good practice for security reasons. Some websites I have used keep the user’s email id in cookie in unencrypted form and I get spammed.