http://drupal.org/writing-secure-code Just a link for a refresher on making sure you're writing secure code.