The Web Application Hacker's Handbook

Dafydd Stuttard, Marcus Pinto