As a site owner, the following list has some things that are good, and some things that are bad from a security standpoint. Pick the things that are good (there may be more than one). whitelisting IP addresses of brute force login attempts using tokens for forms plaintext password storage using salt strings requiring passwords from a rainbow table enabling remote system execution using phpMyAdmin for database changes enabling PHP code injection