Web Form Do's and Don'ts

[Skemcin]

I recently started a new job with a great organization but have found that a couple of their web forms are pretty vulnerable. I'd like to do a presentation to my group/team to make sure they know what the best practices are to follow for online web forms.I'm hoping someone can refer me to a couple of online resources that (in a more higher overview) explain general best practices for web form development - ideally explaining client side and server side things to program.For instance, client-side things be even include something like "don't require a field if its not required in the database its being inserted into". A server side example might be "don't trust the data that is being submitted in your form, check a price of a product against its value in the DB to make sure the form is not an offline hack".Thanks in advance.