there's a real disconnect between the academic literature and tradebooks on using web application frameworks.

I fell into writing about it this way:

me: I want to write about securing databases from attack via the web front end

prof: go find me the most common vulnerability

me: that's sql injection

prof: that's your topic