PHP Security Crash Course Part 1

This PHP class presents a comprehensive overview of security and has been designed to equip PHP developers with the knowledge they need to build more secure web applications.

Audience:

This course is designed for experienced PHP application developers who want to learn or be reminded of security best practices. It is also appropriate for new PHP developers who want to learn how to build security into the applications they are learning to create.

Prerequisites:

Basic knowledge of PHP 5

Course Objectives:

Upon completing the course, participants will be prepared to:
* Incorporate standard, best practice security measures into their PHP applications
* Identify the most common types of vector attacks and how best to monitor and guard against them.

Topics Include:

* What is Security
* The Defense in Depth Concept
* Security's Basic Rules
* Guidelines for Building Secure Web Applications
* Injection Attacks (SQL, XSS, Command, Remote Code)
* XSRF Attacks
* Session Security
* Secure File Uploads
* Creating Secure Configurations
* Password Security
* Sandboxes & Tarpits
* Security through Obscurity
* Security Implications for AJAX
* Filtering for Charsets