Practical Software Security— ASP.Net and Java