Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of IT Security and Secure Coding
- Core principles of application security
- Guidelines for secure software development
- Prevalent security risks in web environments
- The developer’s role in vulnerability prevention
Essentials of Web Application Security
- Defining the web application attack surface
- Standard attack vectors targeting web apps
- Security principles specific to PHP-based systems
- Integrating security into the development lifecycle
Identifying Web Application Vulnerabilities
- Survey of common web security flaws
- Mitigating injection attacks
- Strategies for preventing Cross-Site Scripting (XSS)
- Protecting against Cross-Site Request Forgery (CSRF)
- Addressing insecure direct object references and access control
- Implementing secure session management
- Safeguarding file upload mechanisms
Secure Input Validation and Data Management
- The criticality of validating and sanitizing user data
- Blocking malicious data processing
- Leveraging PHP validation and filtering capabilities
- Shielding applications from unexpected inputs
Client-Side Security Considerations
- Assessing JavaScript security risks
- Secure handling of Ajax interactions
- Security aspects of HTML5
- Preventing client-side exploits
- Aligning client-side and server-side security measures
Applied Cryptography for PHP
- Basics of cryptography
- Hashing techniques and password protection
- Encryption methods for secure data storage
- Utilizing PHP security extensions like OpenSSL
- Implementing cryptographic best practices
PHP Security Features and Development Best Practices
- Exploring PHP security extensions and built-in defenses
- Employing Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Avoiding frequent PHP programming errors
- Secure handling of errors and exceptions
Hardening the PHP Environment
- Securing PHP configuration parameters
- Recommended settings for php.ini
- Apache and server-level security measures
- Managing file permissions and application settings
- Safeguarding production environments
Advanced Topics in PHP Vulnerabilities
- Security issues related to time and state
- Considerations for open_basedir security
- Scenarios involving denial-of-service attacks
- Understanding hash collision vulnerabilities
- Addressing recent PHP framework security concerns
Security Testing and Assessment Methods
- Overview of application security testing
- Utilizing security scanners and assessment tools
- Concepts in penetration testing
- Using proxy tools, sniffers, and fuzzing techniques
- Performing static source code analysis
Hands-On Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Implementing effective mitigation techniques
- Validating security improvements
- Reviewing resources and best practices for secure coding
Requirements
None.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
