Manyebook
Bryan Sullivan
Web Application Security, A Beginner's Guide