Security basics (SQL Injection prevention, input validation)