Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to IT Security and Secure Coding
- Grasping the fundamentals of application security.
- Core principles of secure software development.
- Prevalent security risks in web applications.
- The developer's role in preventing vulnerabilities.
Web Application Security Fundamentals
- Understanding the attack surface of web applications.
- Common techniques used in attacks against web applications.
- Security principles specific to PHP-based applications.
- Practices for a secure development lifecycle.
Web Application Vulnerabilities
- Overview of common web vulnerabilities.
- Injection attacks and their prevention.
- Preventing Cross-Site Scripting (XSS).
- Protection against Cross-Site Request Forgery (CSRF).
- Addressing insecure direct object references and access control issues.
- Implementing secure session management.
- Security considerations for file uploads.
Secure Input Validation and Data Handling
- The importance of validating and sanitizing user input.
- Preventing the processing of malicious data.
- Leveraging PHP validation and filtering features.
- Safeguarding applications against unexpected inputs.
Client-Side Security
- Understanding security risks associated with JavaScript.
- Handling Ajax requests securely.
- Security considerations for HTML5.
- Preventing client-side vulnerabilities.
- Integrating client-side and server-side security practices.
Practical Cryptography for PHP Applications
- Foundations of cryptography.
- Hashing and password protection strategies.
- Encryption and secure data storage methods.
- Utilizing PHP security extensions, including OpenSSL.
- Applying cryptographic best practices.
PHP Security Features and Secure Development Techniques
- PHP security extensions and built-in protections.
- Using Ctype, ext/filter, and HTML Purifier.
- Secure coding patterns in PHP.
- Avoiding common PHP programming errors.
- Secure handling of errors and exceptions.
PHP Environment Hardening
- Securing PHP configuration settings.
- Security recommendations for PHP.ini.
- Apache and server-level security considerations.
- Managing permissions and application configuration.
- Protecting production environments.
Advanced PHP Vulnerability Topics
- Time- and state-related security issues.
- Security considerations regarding Open_basedir.
- Denial-of-service attack scenarios.
- Hash collision vulnerabilities.
- Recent security concerns in the PHP framework.
Security Testing and Assessment Techniques
- Overview of application security testing.
- Utilizing security scanners and testing tools.
- Concepts of penetration testing.
- Use of proxy tools, sniffers, and fuzzing techniques.
- Performing static source code analysis.
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications.
- Applying mitigation techniques.
- Testing security improvements.
- Reviewing secure coding resources and best practices.
Requirements
None.
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
