Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to IT Security and Secure Coding
- Core principles of application security
- Foundations of secure software development
- Typical security risks in web applications
- The developer's role in vulnerability prevention
Web Application Security Fundamentals
- Mapping the web application attack surface
- Common techniques used in web application attacks
- Security principles specific to PHP-based applications
- Integrating security into the development lifecycle
Web Application Vulnerabilities
- Overview of prevalent web vulnerabilities
- Preventing injection attacks
- Mitigating Cross-Site Scripting (XSS)
- Protecting against Cross-Site Request Forgery (CSRF)
- Securing direct object references and access control
- Implementing secure session management
- Best practices for secure file uploads
Secure Input Validation and Data Handling
- The importance of validating and sanitising user input
- Blocking the processing of malicious data
- Leveraging PHP validation and filtering capabilities
- Defending against unexpected or malformed input
Client-Side Security
- Identifying security risks in JavaScript
- Ensuring secure handling of Ajax requests
- Security considerations for HTML5
- Preventing client-side vulnerabilities
- Aligning client-side and server-side security measures
Practical Cryptography for PHP Applications
- Basics of cryptography
- Hashing algorithms and password security
- Data encryption and secure storage
- Utilising PHP security extensions, including OpenSSL
- Applying cryptographic best practices
PHP Security Features and Secure Development Techniques
- PHP security extensions and built-in safeguards
- Using Ctype, ext/filter, and HTML Purifier
- Adopting secure coding patterns in PHP
- Avoiding frequent PHP programming errors
- Secure handling of errors and exceptions
PHP Environment Hardening
- Securing PHP configuration settings
- Recommended PHP.ini security adjustments
- Apache and server-level security measures
- Managing file permissions and application configuration
- Safeguarding production environments
Advanced PHP Vulnerability Topics
- Time and state-related security challenges
- Considerations for open_basedir security
- Understanding denial-of-service attack scenarios
- Vulnerabilities related to hash collisions
- Recent security concerns in the PHP framework
Security Testing and Assessment Techniques
- Overview of application security testing methods
- Utilising security scanners and assessment tools
- Concepts of penetration testing
- Using proxy tools, sniffers, and fuzzing techniques
- Performing static source code analysis
Practical Secure Coding Workshop
- Analyzing vulnerable PHP applications
- Implementing mitigation techniques
- Testing and verifying security improvements
- Reviewing secure coding resources and industry best practices
Requirements
No prior experience is required.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 4800 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (3)
I genuinely enjoyed the real life examples.
Marios Prokopiou
Course - Secure coding in PHP
All topics were well covered and presented with a lot of examples. Ahmed was very efficient and managed to keep us focused and attracted at all times.
Kostas Bastas
Course - Secure coding in PHP
The subject of the course was very interesting and gave us many ideas.
