SQL injection attacks and defense - Clarke, Justin (Elsevier, 2012)