You can only produce secure web applications by taking security into account, from the start. This requires thinking of the potential ways someone could...