Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of IT Security and Secure Coding
- Essential principles of application security
- Core guidelines for secure software development
- Identifying common security risks in web applications
- The developer's role in vulnerability prevention
Core Web Application Security
- Analyzing the attack surface of web applications
- Examining common attack methods targeting web services
- Security principles specific to PHP-based systems
- Implementing secure development lifecycle practices
Common Web Application Vulnerabilities
- Survey of prevalent web vulnerabilities
- Techniques for preventing injection attacks
- Mitigating Cross-Site Scripting (XSS) risks
- Protecting against Cross-Site Request Forgery (CSRF)
- Securing direct object references and access control
- Best practices for secure session management
- Securing file upload mechanisms
Input Validation and Secure Data Handling
- The critical importance of validating and sanitizing user input
- Strategies for preventing malicious data processing
- Leveraging PHP's built-in validation and filtering capabilities
- Defending applications against unexpected or malformed input
Client-Side Security Considerations
- Assessing security risks associated with JavaScript
- Securing Ajax request handling
- Addressing security implications in HTML5
- Strategies for preventing client-side vulnerabilities
- Aligning client-side and server-side security measures
Applied Cryptography in PHP
- Basic principles of cryptography
- Hashing algorithms and password protection
- Encryption techniques and secure data storage
- Utilizing PHP security extensions such as OpenSSL
- Implementing cryptographic best practices
PHP Security Features and Development Techniques
- Overview of PHP security extensions and native protections
- Applying Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Avoiding frequent PHP programming errors
- Implementing secure error and exception handling
Hardening the PHP Environment
- Securing PHP configuration parameters
- Recommended settings for php.ini
- Apache and server-level security enhancements
- Managing file permissions and application configurations
- Protecting production environments
Advanced PHP Vulnerability Scenarios
- Security issues related to time and state management
- Considerations regarding open_basedir security
- Denial-of-service attack scenarios
- Understanding hash collision vulnerabilities
- Current security concerns in PHP frameworks
Security Testing and Evaluation Methods
- Introduction to application security testing
- Utilizing security scanners and assessment tools
- Concepts and practices in penetration testing
- Use of proxy tools, sniffers, and fuzzing techniques
- Performing static source code analysis
Hands-On Secure Coding Workshop
- Analyzing PHP applications with known vulnerabilities
- Implementing effective mitigation techniques
- Testing and verifying security improvements
- Exploring resources and best practices for secure coding
Requirements
No prior specific experience is required.
21 Hours
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
