Top Answers

1. Will HTML Encoding prevent all kinds of XSS attacks?
   95 votes
2. Has reCaptcha been cracked / hacked / OCR'd / defeated / broken?
   94 votes
3. Can I protect against SQL injection by escaping single-quote and surrounding user input with single-quotes?
   91 votes
4. How to Implement Password Resets?
   66 votes
5. Are HTTPS headers encrypted?
   55 votes