Workshop in English - US at Longhorn PHP 2026
Track Name:
Main Ballroom
View Slides: https://gamma.app/docs/Break-It-Then-Fix-It-su5ecshp4l29j1ihttps://gamma.app/docs/Break-It-Then-Fix-It-su5ecshp4l29j1i
View Slides: https://speakerdeck.com/ericmann/break-it-then-fix-it-an-owasp-top-10-workshop-for-php-developers
Checkout the code: https://github.com/ericmann/rampart
Short URL: https://joind.in/talk/9a9db
(QR-Code (opens in new window))
Reading about injection teaches you the words. Exploiting it teaches you the lesson. This hands-on tutorial walks every OWASP Top 10 category inside a deliberately vulnerable PHP app—you'll find the bug, exploit it yourself, then fix it properly. We cover injection, broken access control, authentication failures, SSRF, insecure deserialization, and the rest, with concrete mitigations for Laravel, Symfony, and WordPress. You leave with muscle memory and a hardening checklist—not just awareness.
Comments
Please login to leave a comment