Many security related articles and papers are concerned with protecting networks and servers from outside intrusion, and rightly so. This is understandable since many security professionals do not hail from a programming background. However, application security cannot be ignored in today's complex...