Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of IT Security and Secure Coding
- Core principles of application security
- Standards for secure software development
- Prevalent security risks in web applications
- The developer’s role in vulnerability prevention
Basics of Web Application Security
- Defining the web application attack surface
- Common attack methods targeting web platforms
- Security principles specific to PHP-based systems
- Integrating security into the development lifecycle
Identifying Web Application Vulnerabilities
- Survey of frequent web vulnerabilities
- Mechanisms of injection attacks and prevention strategies
- Defending against Cross-Site Scripting (XSS)
- Protecting against Cross-Site Request Forgery (CSRF)
- Addressing insecure direct object references and access control flaws
- Implementing secure session management
- Security considerations for file uploads
Secure Input Validation and Data Processing
- The critical importance of validating and sanitizing user input
- Preventing the processing of malicious data
- Leveraging PHP’s built-in validation and filtering capabilities
- Safeguarding applications against unexpected inputs
Client-Side Security Implementation
- Assessing JavaScript security risks
- Securing Ajax request handling
- Addressing HTML5 security considerations
- Mitigating client-side vulnerabilities
- Aligning client-side and server-side security practices
Applied Cryptography for PHP Applications
- Fundamentals of cryptographic systems
- Hashing algorithms and password protection
- Encryption techniques for secure data storage
- Utilizing PHP security extensions like OpenSSL
- Applying best practices in cryptography
PHP Security Features and Development Techniques
- Overview of PHP security extensions and built-in protections
- Implementing Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Identifying and avoiding common PHP programming errors
- Secure handling of errors and exceptions
Hardening the PHP Environment
- Securing PHP configuration parameters
- Best practices for php.ini security settings
- Apache and server-level security measures
- Managing permissions and application configurations
- Protecting production environments
Advanced PHP Vulnerability Topics
- Security issues related to time and state
- Considerations for open_basedir security
- Scenarios for denial-of-service attacks
- Vulnerabilities arising from hash collisions
- Current security concerns in the PHP framework
Security Testing and Assessment Methods
- Overview of application security testing
- Deploying security scanners and assessment tools
- Concepts and practices of penetration testing
- Utilizing proxy tools, sniffers, and fuzzing techniques
- Performing static source code analysis
Hands-on Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Implementing mitigation techniques
- Testing the effectiveness of security improvements
- Reviewing secure coding resources and best practices
Requirements
None.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.