Developer's Guide to Web Application Security

But My Code Is Functional!

Your code probably is functional, but is it secure? Have you just tested for areas in

which your code might be exploitable? Code can be completely functional and not

be secure. But what about those unforeseen situations? When you designed the

application, did you consider what would happen if a user fed in malicious input?

How are you ensuring data integrity? All of these, and many more, must be consid-

ered. Most companies at least try to do functional testing on applications, but how

many turn an eye toward security concerns when performing that testing? How

many even know where to start? How many realize it is an issue? ...