Best practices when it comes to writing plugins is a frequently asked question on the wp-hackers mailing list. Good news: Mark Jaquith, one of the WordPress core developers, has an ebook planned: Too many WordPress plugins have security issues. Solution: I'm writing a short e-book on how to write secure WordPress plugins. I'll buy.