web-security methods, advice please!

[Simon]

Judging by the amount of intellectual effort you've put in, I would
disagree and say that you've already covered your butt far more than
many others that don't, and have plenty of responsibility to do so.
I'm thinking of the people who don't put in the minimal research
needed to avoid creating SQL injection vulnerabilities, or people who
put sensitive data on portable storage without figuring out how to
encrypt it.

I think your high level description sounds good, but I only looked
briefly, and I have no experience doing what you're doing.
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists