Pre-Development Security Requirements

Before writing any code, establish security foundations:

# Security requirements checklist
sql_injection_prevention:
  planning_phase:
    - [ ] Identify all database interaction points in the application design
    - [ ] Document data flow from user input to database queries
    - [ ] Define allowed characters and formats for each input field
    - [ ] Establish database access control requirements
    - [ ] Plan for security logging and monitoring
    - [ ] Create threat model including SQL injection scenarios
    
  architecture_decisions:
    - [ ] Choose ORM/query builder with parameterization support
    - [ ] Design API contracts with input validation requirements
    - [ ] Plan database user permissions following least privilege
    - [ ] Define sensitive data that requires extra protection
    - [ ] Establish error handling that doesn't expose system details