Yes, I'm guessing you haven't ever Googled 'web app security' or similar.