Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of IT Security and Secure Coding
- Comprehending the basics of application security
- Core principles of secure software development
- Identifying common security risks in web applications
- The developer's role in preventing vulnerabilities
Basics of Web Application Security
- Analyzing the attack surface of web applications
- Recognizing common attack methods targeting web apps
- Applying security principles to PHP-based applications
- Implementing secure development lifecycle practices
Web Application Vulnerabilities
- Survey of prevalent web vulnerabilities
- Techniques for preventing injection attacks
- Strategies for preventing Cross-Site Scripting (XSS)
- Implementing Cross-Site Request Forgery (CSRF) protection
- Addressing insecure direct object references and access control flaws
- Establishing secure session management
- Considerations for secure file uploads
Safe Input Validation and Data Processing
- The critical role of validating and sanitizing user input
- Preventing the processing of malicious data
- Leveraging PHP validation and filtering capabilities
- Safeguarding applications from unexpected inputs
Client-Side Security
- Evaluating security risks in JavaScript
- Ensuring secure handling of Ajax requests
- Considering security aspects of HTML5
- Preventing vulnerabilities on the client side
- Aligning client-side and server-side security practices
Applied Cryptography for PHP Applications
- Fundamentals of cryptography
- Hashing and password protection methods
- Encryption and secure data storage
- Utilizing PHP security extensions, including OpenSSL
- Implementing cryptographic best practices
PHP Security Features and Development Methods
- PHP security extensions and built-in safeguards
- Utilizing Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Avoiding common PHP programming errors
- Securely handling errors and exceptions
Hardening the PHP Environment
- Securing PHP configuration parameters
- Security recommendations for PHP.ini
- Apache and server-level security considerations
- Managing permissions and application settings
- Protecting production environments
Advanced PHP Vulnerability Subjects
- Security issues related to time and state
- Security implications of open_basedir
- Scenarios for denial-of-service attacks
- Vulnerabilities arising from hash collisions
- Current security concerns in the PHP framework
Security Testing and Assessment Methods
- Overview of application security testing
- Employing security scanners and testing utilities
- Concepts of penetration testing
- Techniques using proxy tools, sniffers, and fuzzing
- Conducting static source code analysis
Hands-On Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Applying mitigation strategies
- Testing security enhancements
- Reviewing secure coding resources and best practices
Requirements
None.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
