Home / Training / Secure Web Development: PHP Session

Secure Web Development: PHP Session

Master PHP web application security, from design to deployment.

Objective

PHP is a powerful language enabling rapid development of websites, intranet portals, or business applications. You will learn to avoid the main vulnerabilities related to web applications, as well as those specific to the PHP platform. This training will also allow you to integrate the main best practices into your development cycle to minimize risks and improve the quality of your application. This training covers the essentials of secure development with PHP, from design to deployment.

Specific objectives:

  • Understand the challenges of web application security
  • Know how to use tools to develop securely

Prerequisites

  • Basic development skills
  • Knowledge of the PHP language

General Information

  • Code: DSWPHP
  • Duration: 3 days
  • Schedule: 8:30 AM - 5:30 PM
  • Location: Training Center, Centre Urbain Nord, Tunis

Target Audience

  • System Administrators
  • Developers

Resources

  • Course materials
  • 40% demonstration
  • 40% theory
  • 20% practical exercises

Training Program

  • Day 1
    • Introduction to IT security
    • The security context
    • Risks and impacts
    • PHP overview
    • History: from scripting language to today
    • The PHP ecosystem
    • Main attacks
    • Cross Site Scripting
    • SQL Injection
    • File Inclusion
    • Logical vulnerabilities
    • Race conditions
    • Denial of Service
    • Remote Code Execution
    • Cross Site Request Forgery
    • Session Fixation
  • Day 2
    • Updates
    • System
    • Web applications
    • PHP pitfalls
    • Using the documentation
    • Weak typing
    • Random data generation
    • Timing attacks
    • Serialization
    • Best practices
    • Using Composer
    • PDO and ORMs
    • Frameworks
    • Captchas
    • Securing flows
  • Day 3
    • Development patterns
    • Managing confidential information
    • User input validation
    • Managing redirects
    • Error and exception handling
    • Application deployment
    • Unit testing
    • Continuous integration
    • Deployment system
    • Static code analysis

Do not hesitate to contact our experts for any additional information, study, and free calculation of an audit service.

Information security is essential for any company that must protect and enhance its information assets.

Contact Us