Good reading:
I’m harvesting credit card numbers and passwords from your site. Here’s how. Part 2: How to stop me harvesting credit card numbers and passwords from your site
Note: This site does not use any scripts on public pages.
