TESTING AND SECURING WEB APPLICATIONS