Authentication and SQL-Injection Prevention Techniques in Web Applications