[rock_hard]

How else do you suggest would people who don't have experience gather it?

[raarts]

By first letting them work on frontend and backend code for a while so they understand how security problems originate from daily process?