Web application security audit of an online shop