If you have decided that you need a good website for your business,the next step is to decide who should create it.This decision is one that needs a lot of attention because if on the one hand, a well-organized and attractive web design can help you tremendously in making more money; on the other hand,a poorly designed website can cost you money, drive away customers, and can hurt your company reputation.

Don't make your section headers smaller and less bold than your section content.

Why it's bad;

Because it's very hard to skim your page for the start of the next section.

On production, always disable error output. Send your error messages to logs, but don’t ever output them to the browser. Error messages, in addition to being unprofessional, can reveal details about your architecture that no one really needs to know.

Second, ALWAYS filter and validate input. Assume every user is trying to destroy your server. Go with a white-list approach. If an input is supposed to be a numeric ID, make sure it’s numeric only. Make sure to run input through sanitizing like mysql_real_escape_string(). And if you’re doing queries, make sure that your web user has ONLY the privileges it needs – don’t give it drop table access or anything. If you want to go further, use two web users – one for read that only has select access, and the write, which has select, insert, update, and delete. Only use the write user when you actually need it.

Finally, when configuring your server, make the docroot as limited as possible. That is, stuff like include files and template files (if you have them) should not be accessible through the server.

Hope these tips help!