Securing Web Applications From Application-Level Attack