Web Application Exploits and Defenses