Web Hacking: Attacks and Defense