Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to IT Security and Secure Coding
- Fundamentals of application security
- Principles of secure software development
- Common security risks in web applications
- The developer’s role in preventing vulnerabilities
Web Application Security Fundamentals
- Analyzing the web application attack surface
- Common attack techniques targeting web applications
- Security principles specific to PHP-based applications
- Practices for a secure development lifecycle
Web Application Vulnerabilities
- Overview of prevalent web vulnerabilities
- Techniques for preventing injection attacks
- Preventing Cross-Site Scripting (XSS)
- Mitigating Cross-Site Request Forgery (CSRF)
- Securing direct object references and access control
- Implementing secure session management
- Considerations for secure file uploads
Secure Input Validation and Data Handling
- The importance of validating and sanitizing user input
- Strategies to prevent malicious data processing
- Leveraging PHP validation and filtering features
- Safeguarding applications against unexpected inputs
Client-Side Security
- Identifying security risks in JavaScript
- Securing Ajax requests
- Security considerations for HTML5
- Preventing client-side vulnerabilities
- Aligning client-side and server-side security practices
Practical Cryptography for PHP Applications
- Foundations of cryptography
- Hashing algorithms and password protection
- Encryption methods and secure data storage
- Utilizing PHP security extensions including OpenSSL
- Applying cryptographic best practices
PHP Security Features and Secure Development Techniques
- PHP security extensions and built-in protections
- Using Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Avoiding common PHP programming errors
- Handling errors and exceptions securely
PHP Environment Hardening
- Securing PHP configuration settings
- Recommendations for php.ini security
- Apache and server-level security considerations
- Managing permissions and application configuration
- Protecting production environments
Advanced PHP Vulnerability Topics
- Security issues related to time and state
- Security considerations for open_basedir
- Scenarios for denial-of-service attacks
- Vulnerabilities arising from hash collisions
- Recent security concerns in the PHP framework
Security Testing and Assessment Techniques
- Overview of application security testing
- Utilizing security scanners and testing tools
- Concepts of penetration testing
- Using proxy tools, sniffers, and fuzzing techniques
- Conducting static source code analysis
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Applying mitigation techniques
- Testing security improvements
- Reviewing secure coding resources and best practices
Requirements
None.
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
