The third project of application security course