Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations of IT Security and Secure Coding
- Core principles of application security
- Best practices in secure software development
- Common security risks in web-based applications
- The developer's role in preventing and mitigating vulnerabilities
Web Application Security Essentials
- Mapping the web application attack surface
- Analyzing common attack techniques against web services
- Security principles specific to PHP-based architectures
- Implementing secure development lifecycle practices
Identifying and Mitigating Web Vulnerabilities
- Comprehensive overview of prevalent web vulnerabilities
- Strategies for preventing injection attacks
- Techniques for preventing Cross-Site Scripting (XSS)
- Protection mechanisms against Cross-Site Request Forgery (CSRF)
- Addressing insecure direct object references and access control flaws
- Implementing secure session management protocols
- Security considerations for file upload processes
Secure Input Validation and Data Management
- The critical importance of validating and sanitizing user input
- Strategies to prevent the processing of malicious data
- Utilizing PHP’s native validation and filtering capabilities
- Safeguarding applications against unexpected or malformed input
Client-Side Security Best Practices
- Assessing security risks in JavaScript implementations
- Securing Ajax requests and asynchronous data exchange
- Addressing HTML5-specific security concerns
- Preventing common client-side vulnerabilities
- Harmonizing client-side and server-side security strategies
Applied Cryptography for PHP
- Fundamental concepts of cryptography
- Hashing algorithms and secure password storage
- Data encryption and secure storage mechanisms
- Integrating PHP security extensions, including OpenSSL
- Applying cryptographic best practices in development
PHP Security Extensions and Development Techniques
- Leveraging PHP security extensions and built-in protections
- Implementing Ctype, ext/filter, and HTML Purifier for validation
- Adopting secure coding patterns in PHP
- Identifying and avoiding common PHP programming errors
- Securing error and exception handling processes
Hardening the PHP Environment
- Securing PHP configuration parameters
- Recommended security settings for php.ini
- Apache and server-level security configurations
- Managing file permissions and application settings
- Protecting production environments from unauthorized access
Advanced PHP Security Topics
- Addressing time and state-related security issues
- Securing open_basedir configurations
- Mitigating denial-of-service attack scenarios
- Understanding hash collision vulnerabilities
- Reviewing recent security concerns in the PHP framework
Security Testing and Assessment Methodologies
- Overview of application security testing approaches
- Utilizing security scanners and automated testing tools
- Concepts and practices in penetration testing
- Employing proxy tools, sniffers, and fuzzing techniques
- Conducting static source code analysis
Hands-On Secure Coding Workshop
- Analyzing vulnerable PHP code samples
- Implementing and verifying mitigation techniques
- Testing the effectiveness of security improvements
- Reviewing secure coding resources and industry best practices
Requirements
No prior specific prerequisites are required.
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
