Superglobals, sessions, cookies, form handling, SQL injection prevention, XSS, CSRF, password hashing, and secure coding practices.