PHP Patterns and Refactoring Training Course

This course equips PHP developers with the essential skills needed to build applications that are resilient against modern internet-based attacks. The curriculum explores web vulnerabilities using practical PHP examples that extend beyond the OWASP Top Ten, addressing a wide range of issues such as various injection attacks, script injections, session handling weaknesses in PHP, insecure direct object references, file upload problems, and more. PHP-specific vulnerabilities are categorized into standard vulnerability types, including missing or inadequate input validation, improper error and exception handling, misuse of security features, and time- and state-related issues. For the latter category, we examine attacks such as open_basedir circumvention, denial-of-service via magic float manipulation, and hash table collision attacks. In every scenario, participants will learn the critical techniques and functions required to mitigate these risks.

A significant emphasis is placed on client-side security, tackling security concerns related to JavaScript, Ajax, and HTML5. The course introduces several PHP security extensions, such as hash, mcrypt, and OpenSSL for cryptographic purposes, as well as Ctype, ext/filter, and HTML Purifier for robust input validation. Best practices for hardening are discussed in the context of PHP configuration (specifically php.ini), Apache, and server-level settings in general. Furthermore, the course provides an overview of various security testing tools and techniques available to developers and testers, including security scanners, penetration testing methods, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerability concepts and configuration practices are reinforced through numerous hands-on exercises. These demonstrations illustrate the consequences of successful attacks, show how to apply mitigation strategies, and guide participants in using various extensions and tools effectively.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Understand web vulnerabilities that extend beyond the OWASP Top Ten and learn how to prevent them
• Acquire knowledge of client-side vulnerabilities and secure coding standards
• Develop a practical understanding of cryptography
• Learn to utilize various built-in security features of PHP
• Identify typical coding mistakes and understand how to avoid them
• Stay informed about recent vulnerabilities within the PHP framework
• Gain practical experience in using security testing tools
• Access resources and further readings on secure coding practices

Audience

Developers

There is a wealth of proven patterns readily accessible to everyone. Often, the process involves adapting the terminology and implementing these patterns within a specific technology stack. This approach can save hundreds of hours that would otherwise be dedicated to design and testing phases. Training Goals This course has two primary objectives: first, it enables you to leverage widely recognized patterns, and second, it empowers you to create and reuse patterns tailored to your organization. It assists you in estimating how patterns can reduce costs, systematize the design process, and generate a code framework based on your patterns. Audience Software designers, business analysts, project managers, programmers and developers as well as operational managers and software division managers. Course Style The course focuses on use cases and their relationship with a specific pattern. Most of the examples are explained in UML and in simple Java examples (the language can change if the course is booked as a closed course). It guides you through the sources of the patterns as well as showing you how to catalogue and describe patterns which can be reused across your organization.

This instructor-led, live training in Kenya (online or onsite) is aimed at intermediate-level Java developers who wish to apply design patterns to improve software structure, maintainability, and scalability.

By the end of this training, participants will be able to:

• Understand the purpose and benefits of design patterns.
• Apply Creational, Structural, and Behavioral patterns effectively in Java.
• Improve code reusability, scalability, and maintainability.
• Refactor existing codebases using design patterns.

This instructor-led, live training in Kenya (online or on-site) is tailored for intermediate PHP developers who wish to apply design patterns effectively in their projects.

By the end of this training, participants will be able to:

• Grasp the purpose and advantages of using design patterns.
• Recognize and implement suitable design patterns for common scenarios.
• Organize PHP applications in accordance with industry-recognized best practices.
• Integrate patterns into modern frameworks such as Symfony or Zend.

This course is tailored for JavaScript developers who design and implement sophisticated internet applications. The curriculum focuses on establishing best practices in JavaScript coding and identifying frequent pitfalls. A key component of the training is exploring object-oriented programming principles within the context of JavaScript syntax.

The recent advancements in microservices and container technologies have fundamentally transformed the way software is designed, developed, deployed, and operated. Today’s applications must be built to handle scalability, elasticity, failure resilience, and constant change. These evolving demands necessitate a distinct set of architectural patterns and best practices. This training explores methods for recognizing, comprehending, and adapting to these new requirements.

Target Audience
This course is designed for individuals who possess a foundational understanding of container technology and Kubernetes concepts but may lack extensive hands-on experience in real-world scenarios. Drawing on practical use cases and insights from actual projects, the training aims to inspire participants to design and manage superior cloud-native applications.

• Developers
• Operations staff
• DevOps engineers
• QA Engineers
• IT Project Managers

Course Format

• Interactive lectures and discussions
• Extensive exercises and practical sessions
• Hands-on implementation within a live lab environment

Course Customization Options

• For those interested in a tailored training session, please reach out to us to make the necessary arrangements.

This instructor-led, live training session in Kenya introduces the fundamentals of Laravel and guides participants through the creation of a Laravel-based web application.

This instructor-led, live training in Kenya (online or onsite) is aimed at developers who wish to learn and use Livewire to build modern and dynamic application interfaces.

By the end of this training, participants will be able to:

• Build and test livewire components.
• Build applications using the Livewire library.
• Create dynamic components within PHP.

This instructor-led, live training in Kenya (online or onsite) is aimed at web developers who wish to use Laravel and Vue.js for fullstack web development.

By the end of this training, participants will be able to:

• Develop web applications with Laravel and Vue.js.
• Integrate the Laravel backend API into Vue.js.
• Deploy a Laravel application.

This instructor-led live training (available online or onsite) is aimed at web developers who wish to build middleware and web services in Laravel.

By the end of this training, participants will be able to:

• Use Laravel PHP Artisan to generate code and components.
• Build RESTful APIs in Laravel that can browse, read, edit, add, and delete.
• Filter and sort results based on URL parameters using RESTful APIs.

As distributed systems become increasingly intricate, the challenge has shifted from the complexity of individual systems to the complexity of the architecture connecting groups of systems. This course explores the relationship between Software Architecture and Technical Enterprise Architecture—two domains that are deeply intertwined yet currently lack a comprehensive descriptive framework. For instance, decomposing a complex monolithic system into two distinct systems that communicate via web services necessitates significant changes to both the newly formed systems and the architectural interactions between them.

This course will address the trade-offs involved, as well as commonly adopted patterns and solutions for managing complex systems and their internal and external communications.