Security Vulnerabilities and Manual Prevention for Web Applications