Web Attacks and Countermeasures