Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of IT Security and Secure Coding
- Core principles of application security
- Guidelines for secure software development lifecycles
- Pervasive security risks in modern web applications
- The developer's role in preventing security vulnerabilities
Basics of Web Application Security
- Defining the attack surface of web applications
- Common methodologies used in web application attacks
- Security principles specific to PHP-based systems
- Integrating security into the development lifecycle
Common Web Application Vulnerabilities
- Overview of frequent security flaws
- Strategies for preventing injection attacks
- Mitigating Cross-Site Scripting (XSS) risks
- Implementing Cross-Site Request Forgery (CSRF) protections
- Addressing insecure direct object references and access control weaknesses
- Establishing secure session management protocols
- Best practices for secure file upload handling
Secure Input Validation and Data Management
- The critical importance of validating and sanitising user data
- Techniques to prevent the processing of malicious payloads
- Leveraging PHP's built-in validation and filtering capabilities
- Defending applications against unexpected or malformed input
Client-Side Security Strategies
- Identifying security risks within JavaScript
- Securing Ajax interactions
- Considering security implications in HTML5 development
- Preventing common client-side vulnerabilities
- Aligning client-side and server-side security measures
Practical Cryptography in PHP
- Essential concepts in cryptography
- Application of hashing and password protection mechanisms
- Implementing encryption for secure data storage
- Utilising PHP security extensions, including OpenSSL
- Adhering to cryptographic best practices
PHP Security Features and Development Techniques
- Exploring PHP security extensions and native protections
- Employing Ctype, ext/filter, and HTML Purifier for validation
- Implementing secure coding patterns in PHP
- Identifying and correcting common PHP programming errors
- Handling errors and exceptions with security in mind
Hardening the PHP Environment
- Optimising PHP configuration for security
- Key security recommendations for php.ini settings
- Considerations for Apache and server-level security
- Managing file permissions and application configurations
- Safeguarding production environments
Advanced Topics in PHP Vulnerabilities
- Security issues related to time and application state
- Understanding open_basedir and its security implications
- Scenarios for denial-of-service attacks
- Exploiting hash collision vulnerabilities
- Current security concerns in the PHP framework ecosystem
Security Testing and Evaluation Methods
- Introduction to application security testing
- Utilising security scanners and diagnostic tools
- Core concepts of penetration testing
- Applying proxy tools, sniffers, and fuzzing techniques
- Conducting static source code analysis
Hands-On Secure Coding Workshop
- Analyzing vulnerable PHP codebases
- Implementing effective mitigation strategies
- Validating security enhancements through testing
- Reviewing authoritative resources on secure coding
Requirements
No prior experience or specific prerequisites are required.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
