Developer's Guide to Web Application Security

Summary

You need security built into your applications for three primary reasons. First, any

decent hacker can exploit a weakness in any application after becoming familiar with

the language it was created in.The Melissa virus is an excellent example of this type

of exploit. Second, application security should be a priority for your organization,

because not everyone needs access to every piece of information you may have. As

discussed in the chapter, personnel files are a perfect example of information that

should be accessible only to a select number of people, based on user rights and

privileges.Third, you need authentication, authorization, and nonr ...