The security risk in Web 2.0