You need neither Spring nor Hibernate to create a web site. You can use them to make development simpler.
Security is a large topic that cannot be addressed in a forum post like this. Several useful links/articles are listed at http://www.coderanch.com/how-to/java/SecurityFaq#web-apps. SQL injection and cross-site scripting (XSS) are probably the most widely used forms of attack against web apps nowadays.
Joined: Jun 05, 2010
Ok. I have got a project, i.e a full functioning website. And i have to use only Spring Hibernate.