Things to look at: • database schema (make sure all inputs are being sanitized) • make sure all errors are being caught and dealt with • modularize anywhere possible ...