Security risks have moved beyond the network and operating systems to website functionality.