SQL injection attacks and defense (Syngress Pub., 2009)