Writing Secure PHP Applications

This half day seminar will give you an overview of the main security requirements for PHP web applications. It is aimed at both new programmers familiar with PHP but not security, and more experienced programmers who would like to be brought up to date.

Prerequites

Some knowledge of PHP (version 4 or higher). It would also be useful to be familiar with database queries using SQL.

Learning outcomes

At the end of the seminar you should be able to:

• Identify and prevent the most common attacks
• Incorporate good practice into the development of PHP applications

Topics covered

• Web security principles
• PHP settings
• Error handling & reporting
• Processing input & output
• Filtering & escaping
• Safe forms
• XSS attacks
• CSRF (XSRF) attacks
• Safe file uploads
• File includes
• Shell commands
• Databases & SQL
• SQL injection
• Password storage
• Session fixation
• Session hijacking
• Access control
• Brute force attacks
• Password sniffing
• Permanent logins
• Encrption & hashing

Please contact us for more information regarding this seminar.