Developer's guide to web application security - Cross, Michael (Syngress Publishing, 2007)