מבחן ארד

A friendly check of the first module: why every input is untrusted, SQL injection, cross-site scripting and safe password storage. Read the small snippets like an attacker would, then answer.