Testing and Securing Web Applications