Application security audit of an online shop