Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to IT Security and Secure Coding
- Foundations of application security
- Principles of secure software development
- Common security risks in web applications
- The role of developers in preventing vulnerabilities
Web Application Security Fundamentals
- Understanding the attack surface of web applications
- Common attack techniques targeting web applications
- Security principles for PHP-based applications
- Best practices in the secure development lifecycle
Web Application Vulnerabilities
- Overview of prevalent web vulnerabilities
- Injection attacks and prevention strategies
- Cross-Site Scripting (XSS) prevention
- Cross-Site Request Forgery (CSRF) protection
- Insecure direct object references and access control challenges
- Secure session management
- Security considerations for file uploads
Secure Input Validation and Data Handling
- The importance of validating and sanitizing user input
- Preventing the processing of malicious data
- Leveraging PHP validation and filtering features
- Protecting applications from unexpected inputs
Client-Side Security
- Understanding JavaScript security risks
- Secure handling of Ajax requests
- HTML5 security considerations
- Preventing client-side vulnerabilities
- Integrating client-side and server-side security practices
Practical Cryptography for PHP Applications
- Basics of cryptography
- Hashing and password protection
- Encryption and secure data storage
- Utilizing PHP security extensions, including OpenSSL
- Applying cryptographic best practices
PHP Security Features and Secure Development Techniques
- PHP security extensions and built-in protections
- Using Ctype, ext/filter, and HTML Purifier
- Secure coding patterns in PHP
- Avoiding common PHP programming errors
- Secure handling of errors and exceptions
Hardening the PHP Environment
- Securing PHP configuration settings
- Security recommendations for php.ini
- Apache and server-level security considerations
- Managing permissions and application configuration
- Protecting production environments
Advanced PHP Vulnerability Topics
- Time and state-related security issues
- Security considerations for open_basedir
- Denial-of-service attack scenarios
- Hash collision vulnerabilities
- Recent security concerns in PHP frameworks
Security Testing and Assessment Techniques
- Overview of application security testing
- Utilizing security scanners and testing tools
- Concepts of penetration testing
- Proxy tools, sniffers, and fuzzing techniques
- Static source code analysis
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Applying mitigation techniques
- Testing security enhancements
- Reviewing secure coding resources and best practices
Requirements
No prior prerequisites required.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
