follow the link.

http://www.appsecinc.com/resources/a...cle/2004-0001/