THE SMART TRICK OF WEB APPLICATION SECURITY THAT NOBODY IS DISCUSSING