Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations of IT Security and Secure Coding
- Understanding the basics of application security
- Principles of secure software development
- Common security risks in web applications
- The developer’s role in preventing vulnerabilities
Web Application Security Basics
- Understanding the attack surface of web applications
- Common techniques used in web application attacks
- Security principles specific to PHP-based applications
- Practices for a secure development lifecycle
Web Application Vulnerabilities
- Overview of prevalent web vulnerabilities
- Injection attacks and their prevention
- Preventing Cross-Site Scripting (XSS)
- Protection against Cross-Site Request Forgery (CSRF)
- Insecure direct object references and access control challenges
- Secure session management strategies
- Security considerations for file uploads
Secure Input Validation and Data Processing
- The importance of validating and sanitizing user input
- Preventing the processing of malicious data
- Leveraging PHP’s validation and filtering capabilities
- Safeguarding applications against unexpected inputs
Client-Side Security
- Assessing security risks in JavaScript
- Secure handling of Ajax requests
- Security considerations for HTML5
- Mitigating client-side vulnerabilities
- Integrating client-side and server-side security measures
Applied Cryptography for PHP Applications
- Fundamentals of cryptography
- Hashing techniques and password security
- Encryption methods and secure data storage
- Utilizing PHP security extensions like OpenSSL
- Implementing cryptographic best practices
PHP Security Features and Development Techniques
- PHP security extensions and built-in protective mechanisms
- Using Ctype, ext/filter, and HTML Purifier
- Secure coding patterns within PHP
- Avoiding common PHP programming errors
- Secure error and exception handling
Hardening the PHP Environment
- Securing PHP configuration settings
- Security recommendations for php.ini
- Apache and server-level security considerations
- Managing permissions and application configurations
- Protecting production environments
Advanced PHP Vulnerability Topics
- Time and state-related security issues
- Security considerations for open_basedir
- Scenarios for denial-of-service attacks
- Hash collision vulnerabilities
- Recent security concerns in PHP frameworks
Security Testing and Evaluation Methods
- Overview of application security testing
- Utilizing security scanners and testing utilities
- Concepts of penetration testing
- Techniques involving proxy tools, sniffers, and fuzzing
- Static source code analysis
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Implementing mitigation strategies
- Testing security enhancements
- Reviewing secure coding resources and industry best practices
Requirements
No prior prerequisites.
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
