Developer's guide to web application security - Cross, Michael (Syngress Publishing, Inc., 2007)