Web application penetration test of an online marketing game with a focus on ways to bypass the intended winner process