Secure coding in PHP Training Course
The course provides essential skills for PHP developers necessary to make their applications resistant to contemporary attacks through the Internet. Web vulnerabilities are discussed through PHP-based examples going beyond the OWASP top ten, tackling various injection attacks, script injections, attacks against session handling of PHP, insecure direct object references, issues with file upload, and many others. PHP-related vulnerabilities are introduced grouped into the standard vulnerability types of missing or improper input validation, incorrect error and exception handling, improper use of security features and time- and state-related problems. For this latter we discuss attacks like the open_basedir circumvention, denial-of-service through magic float or the hash table collision attack. In all cases participants will get familiar with the most important techniques and functions to be used to mitigate the enlisted risks.
A special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. A number of security-related extensions to PHP are introduced like hash, mcrypt and OpenSSL for cryptography, or Ctype, ext/filter and HTML Purifier for input validation. The best hardening practices are given in connection with PHP configuration (setting php.ini), Apache and the server in general. Finally, an overview is given to various security testing tools and techniques which developers and testers can use, including security scanners, penetration testing and exploit packs, sniffers, proxy servers, fuzzing tools and static source code analyzers.
Both the introduction of vulnerabilities and the configuration practices are supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to apply mitigation techniques and introducing the use of various extensions and tools.
Participants attending this course will
- Understand basic concepts of security, IT security and secure coding
- Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
- Learn client-side vulnerabilities and secure coding practices
- Have a practical understanding of cryptography
- Learn to use various security features of PHP
- Learn about typical coding mistakes and how to avoid them
- Be informed about recent vulnerabilities of the PHP framework
- Get practical knowledge in using security testing tools
- Get sources and further readings on secure coding practices
Audience
Developers
Course Outline
- IT security and secure coding
- Web application security
- Web application vulnerabilities
- Client-side security
- Client-side security
- Practical cryptography
- PHP security services
- PHP Environment
- Principles of security and secure coding
- Common coding errors and vulnerabilities
- Security testing techniques and tools
- Knowledge sources
Need help picking the right course?
Secure coding in PHP Training Course - Booking
Secure coding in PHP Training Course - Enquiry
Secure coding in PHP - Consultancy Enquiry
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
Anastasios Manios
Course - Secure coding in PHP
Upcoming Courses
Related Courses
PHP CodeIgniter
14 HoursThis instructor-led, live training in the UAE (online or onsite) is aimed at web developers who wish to build web applications with CodeIgniter.
By the end of this training, participants will be able to:
- Use CRUD in CodeIgniter for refactoring API code.
- Extend CodeIgniter to consume dependencies.
- Load CodeIgniter models and views from containers.
Unit Testing with PHPUnit
14 HoursThis instructor-led, live training in the UAE teaches participants how to write testable code in the form of testing units to facilitate the diagnosis, isolation, and resolution of bugs. The training walks participants through the creation of a work-ready, testing environment using the PHPUnit testing framework.
By the end of this training, participants will be able to:
- Distinguish between good and bad testing units.
- Read and interpret test results.
- Proactively manage and diagnose their code base to reduce bugs.
- Ensure that their code base is fit for continuous integration and deployment.
Zend Framework: Fundamentals
21 HoursThis instructor-led, live training in the UAE (online or onsite) is aimed at intermediate-level to advanced-level PHP developers who wish to learn how to create a reliable and scalable web application using the Zend framework.
By the end of this training, participants will be able to:
- Use Model-View-Controller design patterns to build a database-based web application.
- Receive and process forms.
- Set up input validation and view scripts.
- Handle the various types of MVC events and services offered by Zend Framework MVC component library.
- Prepare and execute queries for a database adapter.
Advanced CakePHP
21 HoursThis instructor-led, live course is designed to help intermediary CakePHP developers access the more advanced features of CakePHP. Through explanations and guided practice, participants will be able to implement better features, stability, security and extensibility into their existing and future CakePHP projects.
Audience
- CakePHP developers looking to further their knowledge and development skills
Format of the Course
- Overview of CakePHP's advanced features together with step-by-step development of a sample application.
CakePHP Fundamentals
28 HoursThis course teaches PHP developers how to build functional web applications using the popular CakePHP MVC web development framework. The course covers beginning principles and approaches, then moves into advanced topics that help enhance the behavior, flexibility and security of an application. Discussions are interactive and the learning is practical and hands-on.
Format of the Course
- Overview of CakePHP features and capabilities together with step-by-step development of a sample application.
Laravel PHP Framework
14 HoursThis instructor-led, live training in the UAE introduces the fundamentals of Laravel and walks participants through the creation of a Laravel-based web application.
Laravel Livewire
7 HoursThis instructor-led, live training in the UAE (online or onsite) is aimed at developers who wish to learn and use Livewire to build modern and dynamic application interfaces.
By the end of this training, participants will be able to:
- Build and test livewire components.
- Build applications using the Livewire library.
- Create dynamic components within PHP.
Laravel and Vue.js
14 HoursThis instructor-led, live training in the UAE (online or onsite) is aimed at web developers who wish to use Laravel and Vue JS for fullstack web development.
By the end of this training, participants will be able to:
- Develop web applications with Laravel and Vue JS.
- Integrate the Laravel backend API into Vue JS.
- Deploy a Laravel application.
Laravel: Middleware Development
14 HoursThis instructor-led, live training in (online or onsite) is aimed at web developers who wish to build middleware and web services in Laravel.
By the end of this training, participants will be able to:
- Use Laravel PHP Aritisan to generate code and components.
- Build RESTful APIs in Laravel that can browse, read, edit, add, and delete.
- Filter and sort results based on URL parameters using RESTful APIs.
Swoole for PHP Programmers
14 HoursThis instructor-led, live training (online or onsite) is aimed at PHP programmers wishing to write asynchronous web services using the PHP language (in a fashion similar to Node.js).
By the end of this training, participants will be able to:
- Install and configure Swoole
- Understand the concepts behind event-driven, asynchronous, non-blocking I/O networking models.
- Create and deploy asynchronous services written in PHP
- Speed up existing Laravel or Lumen applications with Laravel-Swool.
Format of the Course
- Interactive lecture and discussion
- Lots of exercises and practice
- Hands-on implementation in a live-lab environment
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
- To learn more about Swool, please visit: https://www.swoole.co.uk/
Develop Web Applications with PHP and Yii 2
14 HoursYii is a high-performance PHP framework best for developing Web 2.0 applications.
Symfony2 - enterprise web framework
21 HoursSymfony is a set of PHP Components, a Web Application framework, a Philosophy and a Community.
Web Development with Symfony3
28 HoursSymfony is a set of PHP Components, a Web Application framework, a Philosophy and a Community.
Symfony 4 for Web Application Development
28 HoursSymfony 4 is a software development framework for PHP. It contains reusable PHP libraries to facilitate the development and testing of new applications written in PHP (Web apps or APIs). Symfony 4 is a command-line software framework with the built-in commands that makes PHP code development more efficient.
In this instructor-led, live training, participants will learn to use the Symfony framework and the PHP language as they step through the creation of a PHP application.
By the end of this training, participants will be able to:
- Use Symfony 4 to create and test code written in PHP
- Create simple code for PHP that reads and writes to a database
Audience
- Programmers and web developers with working knowledge of PHP and HTML
- Advanced developers who seek more efficient development tools for faster closures
- Software designers who need to update their understanding of current development tools that match user needs
Format of the course
- Part lecture, part discussion, exercises and heavy hands-on practice
Application Security for Developers
21 HoursThis course will help professionals understand the value and limits of Application Security. While the Application Security Principals provides valuable awareness around some of the major risks in applications today, this course will highlight both the good and not so good.
This course is crucial because of the increasing need for developers to code in a secure manner. It is critical to introduce security as a quality component into the development cycle. This course aims at educating developers about various security vulnerabilities through hands-on practice using our purposely developed insecure web application.