I have the second edition of this book and these issues are addressed. I like the book - it's a start. Anyone involved in a corporate website should be aware of the need to consider security issues and if they aren't they shouldn't be allowed near it.

Perhaps this node should be changed so that it clearly refers to the first edition of the book?