Combined JAVA, PHP and Web Application Security Training Course
Even experienced programmers do not master by all means the various security services offered by their development platforms, and are likewise not aware of the different vulnerabilities that are relevant for their developments. This course targets developers using both Java and PHP, providing them essential skills necessary to make their applications resistant to contemporary attacks through the Internet.
Levels of Java security architecture are walked through by tackling access control, authentication and authorization, secure communication and various cryptographic functions. Various APIs are also introduced that can be used to secure your code in PHP, like OpenSSL for cryptography or HTML Purifier for input validation. On server side, the best practices are given for hardening and configuring the operating system, the web container, the file system, the SQL server and the PHP itself, while a special focus is given to client-side security through security issues of JavaScript, Ajax and HTML5.
General web vulnerabilities are discussed by examples aligned to the OWASP Top Ten, showing various injection attacks, script injections, attacks against session handling, insecure direct object references, issues with file uploads, and many others. The various Java- and PHP-specific language problems and issues stemming from the runtime environment are introduced grouped into the standard vulnerability types of missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues and mobile code-related vulnerabilities.
Participants can try out the discussed APIs, tools and the effects of configurations for themselves, while the introduction of vulnerabilities are all supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct the bugs and apply mitigation techniques, and introducing the use of various extensions and tools.
Participants attending this course will
- Understand basic concepts of security, IT security and secure coding
- Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
- Learn client-side vulnerabilities and secure coding practices
- Learn to use various security features of the Java development environment
- Have a practical understanding of cryptography
- Learn to use various security features of PHP
- Understand security concepts of Web services
- Get practical knowledge in using security testing tools
- Learn about typical coding mistakes and how to avoid them
- Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
- Get sources and further readings on secure coding practices
Audience
Developers
Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
- IT security and secure coding
- Web application security
- Web application vulnerabilities
- Client-side security
- Foundations of Java security
- Practical cryptography
- Java security services
- PHP security services
- PHP Environment
- Security of Web services
- Common coding errors and vulnerabilities
- Knowledge sources
28 Hours
Open Training Courses require 5+ participants.
Combined JAVA, PHP and Web Application Security Training Course - Booking
Combined JAVA, PHP and Web Application Security Training Course - Enquiry
Combined JAVA, PHP and Web Application Security - Consultancy Enquiry
Testimonials (1)
Covered a lot of material.
Michael Promes - Nebraska Medicine
Course - Laravel PHP Framework
Upcoming Courses
Related Courses
PHP CodeIgniter
14 HoursThis instructor-led, live training in the US (online or onsite) is aimed at web developers who wish to build web applications with CodeIgniter.
By the end of this training, participants will be able to:
- Use CRUD in CodeIgniter for refactoring API code.
- Extend CodeIgniter to consume dependencies.
- Load CodeIgniter models and views from containers.
Read more...
Unit Testing with PHPUnit
14 HoursThis instructor-led, live training in the US teaches participants how to write testable code in the form of testing units to facilitate the diagnosis, isolation, and resolution of bugs. The training walks participants through the creation of a work-ready, testing environment using the PHPUnit testing framework.
By the end of this training, participants will be able to:
- Distinguish between good and bad testing units.
- Read and interpret test results.
- Proactively manage and diagnose their code base to reduce bugs.
- Ensure that their code base is fit for continuous integration and deployment.
Read more...
Zend Framework: Fundamentals
21 HoursThis instructor-led, live training in the US (online or onsite) is aimed at intermediate-level to advanced-level PHP developers who wish to learn how to create a reliable and scalable web application using the Zend framework.
By the end of this training, participants will be able to:
- Use Model-View-Controller design patterns to build a database-based web application.
- Receive and process forms.
- Set up input validation and view scripts.
- Handle the various types of MVC events and services offered by Zend Framework MVC component library.
- Prepare and execute queries for a database adapter.
Read more...
Advanced CakePHP
21 HoursThis instructor-led, live course is designed to help intermediary CakePHP developers access the more advanced features of CakePHP. Through explanations and guided practice, participants will be able to implement better features, stability, security and extensibility into their existing and future CakePHP projects.
Audience
- CakePHP developers looking to further their knowledge and development skills
Format of the Course
- Overview of CakePHP's advanced features together with step-by-step development of a sample application.
Read more...
CakePHP Fundamentals
28 HoursThis course teaches PHP developers how to build functional web applications using the popular CakePHP MVC web development framework. The course covers beginning principles and approaches, then moves into advanced topics that help enhance the behavior, flexibility and security of an application. Discussions are interactive and the learning is practical and hands-on.
Format of the Course
- Overview of CakePHP features and capabilities together with step-by-step development of a sample application.
Read more...
Laravel PHP Framework
14 HoursThis instructor-led, live training in the US introduces the fundamentals of Laravel and walks participants through the creation of a Laravel-based web application.
Read more...
Laravel Livewire
7 HoursThis instructor-led, live training in the US (online or onsite) is aimed at developers who wish to learn and use Livewire to build modern and dynamic application interfaces.
By the end of this training, participants will be able to:
- Build and test livewire components.
- Build applications using the Livewire library.
- Create dynamic components within PHP.
Read more...
Laravel and Vue.js
14 HoursThis instructor-led, live training in the US (online or onsite) is aimed at web developers who wish to use Laravel and Vue JS for fullstack web development.
By the end of this training, participants will be able to:
- Develop web applications with Laravel and Vue JS.
- Integrate the Laravel backend API into Vue JS.
- Deploy a Laravel application.
Read more...
Laravel: Middleware Development
14 HoursThis instructor-led, live training in (online or onsite) is aimed at web developers who wish to build middleware and web services in Laravel.
By the end of this training, participants will be able to:
- Use Laravel PHP Aritisan to generate code and components.
- Build RESTful APIs in Laravel that can browse, read, edit, add, and delete.
- Filter and sort results based on URL parameters using RESTful APIs.
Read more...
Swoole for PHP Programmers
14 HoursThis instructor-led, live training (online or onsite) is aimed at PHP programmers wishing to write asynchronous web services using the PHP language (in a fashion similar to Node.js).
By the end of this training, participants will be able to:
- Install and configure Swoole
- Understand the concepts behind event-driven, asynchronous, non-blocking I/O networking models.
- Create and deploy asynchronous services written in PHP
- Speed up existing Laravel or Lumen applications with Laravel-Swool.
Format of the Course
- Interactive lecture and discussion
- Lots of exercises and practice
- Hands-on implementation in a live-lab environment
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
- To learn more about Swool, please visit: https://www.swoole.co.uk/
Read more...
Develop Web Applications with PHP and Yii 2
14 HoursYii is a high-performance PHP framework best for developing Web 2.0 applications.
Read more...
