Sorry for the late reply. As I said I am in the same boat as you so just worried about how I could get prevent myself from being "hacked". Email verification for user signups is something I am doing. Apart from that just looking at every piece of code and not relying just on the client side stuff(javascript) :)