Some useful points made in other comments, tied-in to your particular problem/exploit. I would recommend you get familiar with OWASP, and especially the 'top t

Some useful points made in other comments, tied-in to your particular problem/exploit. I would recommend you get familiar with OWASP, and especially the 'top ten' security issues that they publish. See https://owasp.org/www-project-top-ten/ https://owasp.org/www-project-top-ten/