1. Educate your developers. 2. Use (or create) plumbing that makes it easier to be safe. 3. Application logic can still screw you.