Web applications are growing rapidly and as the amount of web sites globally increases so do security threats. Complex applications often interact with third party services and databases to fetch information and often interactions require user input. Intruders are targeting web applications specifically and they are a huge security threat to organizations and a way to combat this is to have intrusion detection systems. Most common web attack methods are well researched and documented however due to time constraints developers often write applications fast and may not implement the best security practices. This report describes one way to implement a intrusion detection system that specifically detects web based attacks.