Facts, hacks and attacks from my life as a web application developer