Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to IT Security and Secure Coding
- Comprehending the fundamentals of application security
- Core principles of secure software development
- Prevalent security risks in web applications
- The developer's role in vulnerability prevention
Web Application Security Fundamentals
- Understanding the attack surface of web applications
- Common attack vectors targeting web applications
- Security principles specific to PHP-based applications
- Best practices in the secure development lifecycle
Web Application Vulnerabilities
- Survey of common web vulnerabilities
- Techniques for injection attacks and their prevention
- Mitigating Cross-Site Scripting (XSS)
- Safeguarding against Cross-Site Request Forgery (CSRF)
- Addressing insecure direct object references and access control flaws
- Implementing secure session management
- Security considerations for file uploads
Secure Input Validation and Data Handling
- The significance of validating and sanitizing user input
- Preventing the processing of malicious data
- Utilizing PHP validation and filtering capabilities
- Shielding applications from unexpected or malformed input
Client-Side Security
- Recognizing security risks associated with JavaScript
- Secure management of Ajax requests
- Security considerations for HTML5
- Preventing client-side vulnerabilities
- Aligning client-side and server-side security strategies
Practical Cryptography for PHP Applications
- Basics of cryptography
- Hashing algorithms and password protection
- Encryption methods and secure data storage
- Incorporating PHP security extensions such as OpenSSL
- Implementing cryptographic best practices
PHP Security Features and Secure Development Techniques
- PHP security extensions and native protections
- Utilizing Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Preventing common PHP programming errors
- Secure handling of errors and exceptions
PHP Environment Hardening
- Securing PHP configuration parameters
- Security recommendations for php.ini
- Apache and server-level security measures
- Managing permissions and application settings
- Safeguarding production environments
Advanced PHP Vulnerability Topics
- Security issues related to time and state
- Considerations for open_basedir security
- Scenarios involving denial-of-service attacks
- Vulnerabilities stemming from hash collisions
- Emerging security concerns in the PHP framework
Security Testing and Assessment Techniques
- Overview of application security testing
- Employing security scanners and testing utilities
- Foundations of penetration testing
- Use of proxy tools, sniffers, and fuzzing methods
- Static source code analysis
Practical Secure Coding Workshop
- Examination of vulnerable PHP applications
- Implementation of mitigation strategies
- Testing the effectiveness of security enhancements
- Review of secure coding resources and best practices
Requirements
None.
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
