UFW is great at what it does, but it's not going to save you from web application attacks.