How to Attack and Defend Your Website