The Internet is rife with spammers and hackers threatening to deface or take down your site, ruining your brand, paralyzing your community, or stealing confidential data. Whether you are a site administrator, a module developer, themer, system administrator, or a user, you ought to bear security in mind when administering your site or writing code. You could otherwise put your own site or other peoples site at risk by not following some simple rules and best practices. Fortunately you are not alone in this situation, and the Drupal community has developed a solid process to help you avoid major headaches when dealing with security matters.