What are the most important steps you would recommend for securing a Web application?
Make sure Input Validation is enforced within the code - Security QA testing
Implement software security policy
Remove or protect hidden files and directories
1 and 2
all