SQL Injection and Cross-Site Scripting-The CodeGain