My team is auditing our e-commerce platform security compliance for a class case study so can you list the best steps to check for common vulnerabilities