Text this: Web application defender's cookbook