Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to IT Security and Secure Coding
- Understanding the fundamentals of application security.
- Core principles of secure software development.
- Identifying common security risks in web applications.
- The crucial role developers play in preventing vulnerabilities.
Fundamentals of Web Application Security
- Analyzing the web application attack surface.
- Exploring common attack techniques targeting web apps.
- Applying security principles to PHP-based applications.
- Implementing secure development lifecycle practices.
Common Web Application Vulnerabilities
- Overview of prevalent web vulnerabilities.
- Understanding injection attacks and prevention methods.
- Strategies for preventing Cross-Site Scripting (XSS).
- Implementing protection against Cross-Site Request Forgery (CSRF).
- Addressing insecure direct object references and access control flaws.
- Ensuring secure session management.
- Considering security implications of file uploads.
Secure Input Validation and Data Handling
- The importance of validating and sanitizing user input.
- Preventing the processing of malicious data.
- Leveraging PHP’s built-in validation and filtering features.
- Protecting applications from unexpected or malformed input.
Client-Side Security
- Understanding security risks associated with JavaScript.
- Securely handling Ajax requests.
- Considering security aspects of HTML5.
- Preventing vulnerabilities on the client side.
- Integrating client-side and server-side security practices.
Practical Cryptography for PHP Applications
- Fundamentals of cryptography.
- Hashing techniques and password protection mechanisms.
- Encryption methods and secure data storage solutions.
- Utilizing PHP security extensions, including OpenSSL.
- Applying best practices for cryptographic implementations.
PHP Security Features and Secure Development Techniques
- Overview of PHP security extensions and built-in protections.
- Using Ctype, ext/filter, and HTML Purifier effectively.
- Adopting secure coding patterns in PHP.
- Avoiding common programming mistakes in PHP.
- Safely handling errors and exceptions.
Hardening the PHP Environment
- Securing PHP configuration settings.
- Recommending security guidelines for php.ini.
- Addressing Apache and server-level security considerations.
- Managing permissions and application configurations.
- Protecting production environments from threats.
Advanced PHP Vulnerability Topics
- Exploring time and state-related security issues.
- Examining open_basedir security implications.
- Analyzing denial-of-service attack scenarios.
- Understanding hash collision vulnerabilities.
- Reviewing recent security concerns within PHP frameworks.
Security Testing and Assessment Techniques
- Overview of application security testing methodologies.
- Utilizing security scanners and testing tools.
- Understanding penetration testing concepts.
- Employing proxy tools, sniffers, and fuzzing techniques.
- Conducting static source code analysis.
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications to identify flaws.
- Applying effective mitigation techniques.
- Testing and verifying security improvements.
- Reviewing secure coding resources and industry best practices.
Requirements
No prior prerequisites are required.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
