Course Overview
PHP as a programming language is easy to learn and easy to use. This is also the reason for its popularity. Unfortunately, PHP does not only make it easy to write applications, it also comes with certain features that make it easy to write insecure code. This course gives guidelines on how to avoid dangerous language constructs and features. Moreover, it gives instructions on how to perform proper security checks that help to defend against common attacks. Each section deals with a specific security problem or function group and is accompanied by a list of recommendations. These recommendations can be used as a checklist during the development phase and for security assessments.
Prerequisites
Have knowledge and/or experience in HTML, SQL, and PHP programming.
PHP Security – Schedule
|
Day 1 |
|
|
09.00am – 10.00am |
Overview
|
| 10.00am – 10.30am |
Breakfast |
|
10.30am – 01.00pm |
Security Principles
|
|
01.00pm – 02.00pm |
Lunch |
|
02.00pm – 05.00pm |
Security Practices
Forms & URLs
|
|
Day 2 |
|
|
09.00am – 10.00am |
Database & SQL
|
|
10.00am – 10.30am |
Breakfast |
|
10.30am – 01.00pm |
Sessions and Cookies
|
|
01.00pm – 02.00pm |
Lunch |
|
02.00pm – 05.00pm |
Include Files
Files & Commands
|
|
Day 3 |
|
|
09.00am – 10.00am |
Authentication and Authorization
|
|
10.00am – 10.30am |
Breakfast |
|
10.30am – 01.00pm |
Secure operations
|
|
01.00pm – 02.00pm |
Lunch |
|
02.00pm – 05.00pm |
Secure Environment
|