Secure Web Application Development: A Hands-On Guide with Python and Django

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2022

M. BakerSecure Web Application Development https://doi.org/10.1007/978-1-4842-8596-1_1

1. Introduction

Matthew Baker¹  

(1)

Kaisten, Aargau, Switzerland

 

1.1 About This Book

In 2009, hackers obtained user credentials of over 30 million users of mobile game publisher RockYou. They exploited a SQL injection vulnerability to obtain the site’s user table. To make matters worse, passwords were stored unencrypted, allowing the hackers to obtain their passwords without further need to crack them.¹

In 2010, a developer released a Firefox extension called Firesheep that enabled eavesdroppers to obtain session IDs of Facebook and other sites logged in through the same Wi-Fi ...