This chapter is excerpted from the book titled "How to Break Web Software: Functional and Security Testing of Web Applications and Web Services" by Mike Andrews, James A. Whittaker