Honestly, this is a good rule for programming in general. With user input, make sure it's in its own area where it can't interact with anything else and make sure to read and process in such a way that it can't fuck with the operation of the program.
