Web application penetration tests of an online lottery scratch ticket game