CSRF, XSS, and SQL Injection attacks on a dummy payroll site