2
The Basics of Web Application Security (martinfowler.com)