Securing Web-based Projects