Which one of the following statements is wrong?

A$.$ Users use the client$-$server model to access web servers.

B$.$ Users can be attacked by web browsing.

C$.$ In the client$-$server model, a client makes a request and the server sends back the response, so a web server cannot be attacked by a web user.

D$.$ The username$/$password is a common user authentication mechanism for users to access a web server.

$-000$