Text this: Best Practices to Protect Databases behind RDBMS-Powered Web Applications