Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to IT Security and Secure Coding
- Understanding the fundamentals of application security
- Principles underpinning secure software development
- Common security risks inherent in web applications
- The developer's role in preventing vulnerabilities
Fundamentals of Web Application Security
- Mapping the web application attack surface
- Common techniques used in attacks against web applications
- Security principles specific to PHP-based applications
- Best practices for the secure software development lifecycle
Web Application Vulnerabilities
- Overview of prevalent web vulnerabilities
- Injection attacks and strategies for prevention
- Prevention of Cross-Site Scripting (XSS)
- Protection against Cross-Site Request Forgery (CSRF)
- Managing insecure direct object references and access control issues
- Implementing secure session management
- Considerations for file upload security
Secure Input Validation and Data Handling
- The importance of validating and sanitizing user input
- Preventing the processing of malicious data
- Leveraging PHP’s validation and filtering capabilities
- Protecting applications from unexpected or malformed input
Client-Side Security
- Understanding security risks associated with JavaScript
- Secure handling of Ajax requests
- Security considerations for HTML5
- Strategies for preventing client-side vulnerabilities
- Integrating client-side and server-side security practices
Practical Cryptography for PHP Applications
- Fundamentals of cryptography
- Hashing techniques and password protection
- Encryption methods and secure data storage
- Utilizing PHP security extensions, including OpenSSL
- Applying best practices for cryptographic implementations
PHP Security Features and Secure Development Techniques
- Exploring PHP security extensions and built-in protections
- Using Ctype, ext/filter, and HTML Purifier effectively
- Adopting secure coding patterns in PHP
- Avoiding common programming errors in PHP
- Securely handling errors and exceptions
Hardening the PHP Environment
- Securing PHP configuration settings
- Security recommendations for php.ini
- Security considerations at the Apache and server level
- Managing permissions and application configurations
- Protecting production environments
Advanced PHP Vulnerability Topics
- Addressing time and state-related security issues
- Security considerations regarding open_basedir
- Scenarios involving denial-of-service attacks
- Vulnerabilities related to hash collisions
- Recent security concerns within PHP frameworks
Security Testing and Assessment Techniques
- Overview of application security testing methodologies
- Utilizing security scanners and testing tools
- Concepts of penetration testing
- Use of proxy tools, sniffers, and fuzzing techniques
- Static source code analysis
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Implementing mitigation techniques
- Testing security improvements
- Reviewing secure coding resources and best practices
Requirements
None.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
