Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations of IT Security and Secure Coding
- Understanding the fundamentals of application security
- Core principles of secure software development
- Common security risks associated with web applications
- The developer's role in preventing vulnerabilities
Basics of Web Application Security
- Analyzing the attack surface of web applications
- Common attack vectors targeting web apps
- Security principles specific to PHP-based applications
- Practices for a secure development lifecycle
Web Application Vulnerabilities
- Overview of prevalent web vulnerabilities
- Techniques for detecting and preventing injection attacks
- Strategies for preventing Cross-Site Scripting (XSS)
- Protection against Cross-Site Request Forgery (CSRF)
- Addressing insecure direct object references and access control flaws
- Implementing secure session management
- Security considerations for file uploads
Safe Input Validation and Data Handling
- The importance of validating and sanitizing user input
- Methods to prevent the processing of malicious data
- Leveraging PHP’s built-in validation and filtering capabilities
- Safeguarding applications against unexpected inputs
Client-Side Security
- Assessing security risks in JavaScript
- Handling Ajax requests securely
- Security considerations for HTML5
- Preventing vulnerabilities on the client side
- Aligning client-side and server-side security practices
Applied Cryptography for PHP Applications
- Fundamentals of cryptography
- Hashing techniques and password protection
- Encryption and secure data storage
- Utilizing PHP security extensions, including OpenSSL
- Implementing best practices in cryptography
PHP Security Features and Secure Development Methods
- PHP security extensions and native protections
- Utilizing Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Avoiding frequent PHP programming errors
- Secure handling of errors and exceptions
Hardening the PHP Environment
- Securing PHP configuration parameters
- Recommended security settings for php.ini
- Apache and server-level security measures
- Managing permissions and application configurations
- Protecting production environments
Advanced PHP Vulnerability Topics
- Security issues related to time and state
- Considerations regarding open_basedir security
- Scenarios for denial-of-service attacks
- Vulnerabilities arising from hash collisions
- Current security concerns in the PHP framework
Security Testing and Assessment Methodologies
- Overview of application security testing
- Using security scanners and testing utilities
- Concepts in penetration testing
- Employing proxy tools, sniffers, and fuzzing techniques
- Static analysis of source code
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Implementing mitigation techniques
- Testing security enhancements
- Reviewing resources and best practices for secure coding
Requirements
No prior experience required.
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
