dealed well with CSRF,XSS,SQL-INJECTION