Security settings that are must in any project

See more:

C#

C#4.0

I wanted to jot down security options in .net got a few that are listed below anyone else can think of some more :)

1. SQL Injection: Avoid allowing special characters to be typed in controls.
2. Web Services: Custom encryption and decryption.
3. SQL Server: Always have text encrypted when deploying.
4. Passwords: Encrypt them and hide them when taking logs.
5. Always have custom pages shown for errors like 400, 503 etc…