A collection of web pages vulnerable to SQL injection flaws