Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations of IT Security and Secure Coding
- Core principles of application security
- Best practices in secure software development
- Prevalent security risks in web applications
- The developer's role in vulnerability prevention
Basics of Web Application Security
- Identifying the web application attack surface
- Common attack methodologies targeting web apps
- Security standards for PHP-based systems
- Integrating security into the development lifecycle
Web Application Vulnerabilities
- Survey of common web vulnerabilities
- Strategies for preventing injection attacks
- Preventing Cross-Site Scripting (XSS)
- Safeguarding against Cross-Site Request Forgery (CSRF)
- Addressing insecure direct object references and access control flaws
- Implementing secure session management
- Ensuring security in file upload processes
Secure Input Validation and Data Management
- The criticality of validating and sanitizing user input
- Techniques for blocking malicious data processing
- Leveraging PHP validation and filtering mechanisms
- Defending against unexpected and anomalous input
Client-Side Security
- Assessing JavaScript security risks
- Securing Ajax request handling
- Addressing HTML5 security considerations
- Mitigating client-side vulnerabilities
- Aligning client-side and server-side security measures
Applied Cryptography for PHP
- Fundamentals of cryptography
- Hashing techniques and password protection
- Encryption strategies for secure data storage
- Utilizing PHP security extensions like OpenSSL
- Implementing cryptographic best practices
PHP Security Features and Secure Development
- Exploring PHP security extensions and built-in safeguards
- Working with Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Eliminating common PHP programming errors
- Secure handling of errors and exceptions
Hardening the PHP Environment
- Securing PHP configuration parameters
- Recommending secure php.ini settings
- Apache and server-level security measures
- Managing file permissions and application configurations
- Protecting production environments
Advanced PHP Vulnerability Analysis
- Security issues related to time and state
- Considerations regarding open_basedir security
- Scenarios for denial-of-service attacks
- Understanding hash collision vulnerabilities
- Current security concerns in the PHP framework
Security Testing and Assessment
- Overview of application security testing
- Utilizing security scanners and assessment tools
- Core concepts of penetration testing
- Employing proxy tools, sniffers, and fuzzing techniques
- Conducting static source code analysis
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Implementing effective mitigation techniques
- Testing the effectiveness of security enhancements
- Reviewing secure coding resources and industry best practices
Requirements
No prior experience required.
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
