Null bhopal Sep 2016: What it Takes to Secure a Web Application