Combined JAVA, PHP and Web Application Security Training Course
Even experienced programmers do not master by all means the various security services offered by their development platforms, and are likewise not aware of the different vulnerabilities that are relevant for their developments. This course targets developers using both Java and PHP, providing them essential skills necessary to make their applications resistant to contemporary attacks through the Internet.
Levels of Java security architecture are walked through by tackling access control, authentication and authorization, secure communication and various cryptographic functions. Various APIs are also introduced that can be used to secure your code in PHP, like OpenSSL for cryptography or HTML Purifier for input validation. On server side, the best practices are given for hardening and configuring the operating system, the web container, the file system, the SQL server and the PHP itself, while a special focus is given to client-side security through security issues of JavaScript, Ajax and HTML5.
General web vulnerabilities are discussed by examples aligned to the OWASP Top Ten, showing various injection attacks, script injections, attacks against session handling, insecure direct object references, issues with file uploads, and many others. The various Java- and PHP-specific language problems and issues stemming from the runtime environment are introduced grouped into the standard vulnerability types of missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues and mobile code-related vulnerabilities.
Participants can try out the discussed APIs, tools and the effects of configurations for themselves, while the introduction of vulnerabilities are all supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct the bugs and apply mitigation techniques, and introducing the use of various extensions and tools.
Participants attending this course will
- Understand basic concepts of security, IT security and secure coding
- Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
- Learn client-side vulnerabilities and secure coding practices
- Learn to use various security features of the Java development environment
- Have a practical understanding of cryptography
- Learn to use various security features of PHP
- Understand security concepts of Web services
- Get practical knowledge in using security testing tools
- Learn about typical coding mistakes and how to avoid them
- Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
- Get sources and further readings on secure coding practices
Audience
Developers
Course Outline
- IT security and secure coding
- Web application security
- Web application vulnerabilities
- Client-side security
- Foundations of Java security
- Practical cryptography
- Java security services
- PHP security services
- PHP Environment
- Security of Web services
- Common coding errors and vulnerabilities
- Knowledge sources
Open Training Courses require 5+ participants.
Combined JAVA, PHP and Web Application Security Training Course - Booking
Combined JAVA, PHP and Web Application Security Training Course - Enquiry
Combined JAVA, PHP and Web Application Security - Consultancy Enquiry
Testimonials (2)
Covered a lot of material.
Michael Promes - Nebraska Medicine
Course - Laravel PHP Framework
I like the Doctrine concept in Symphony taken by the trainer. The trainer is more energetic and make the sessions more interactive. I think it is a great capability of the trainer.
Kumaran Chandran
Course - Web Development with Symfony3
Upcoming Courses
Related Courses
PHP CodeIgniter
14 HoursThis instructor-led, live training in Sweden (online or onsite) is aimed at web developers who wish to build web applications with CodeIgniter.
By the end of this training, participants will be able to:
- Use CRUD in CodeIgniter for refactoring API code.
- Extend CodeIgniter to consume dependencies.
- Load CodeIgniter models and views from containers.
Unit Testing with PHPUnit
14 HoursThis instructor-led, live training in Sweden teaches participants how to write testable code in the form of testing units to facilitate the diagnosis, isolation, and resolution of bugs. The training walks participants through the creation of a work-ready, testing environment using the PHPUnit testing framework.
By the end of this training, participants will be able to:
- Distinguish between good and bad testing units.
- Read and interpret test results.
- Proactively manage and diagnose their code base to reduce bugs.
- Ensure that their code base is fit for continuous integration and deployment.
Zend Framework: Fundamentals
21 HoursThis instructor-led, live training in Sweden (online or onsite) is aimed at intermediate-level to advanced-level PHP developers who wish to learn how to create a reliable and scalable web application using the Zend framework.
By the end of this training, participants will be able to:
- Use Model-View-Controller design patterns to build a database-based web application.
- Receive and process forms.
- Set up input validation and view scripts.
- Handle the various types of MVC events and services offered by Zend Framework MVC component library.
- Prepare and execute queries for a database adapter.
Advanced CakePHP
21 HoursThis instructor-led, live course is designed to help intermediary CakePHP developers access the more advanced features of CakePHP. Through explanations and guided practice, participants will be able to implement better features, stability, security and extensibility into their existing and future CakePHP projects.
Audience
- CakePHP developers looking to further their knowledge and development skills
Format of the Course
- Overview of CakePHP's advanced features together with step-by-step development of a sample application.
CakePHP Fundamentals
28 HoursThis course teaches PHP developers how to build functional web applications using the popular CakePHP MVC web development framework. The course covers beginning principles and approaches, then moves into advanced topics that help enhance the behavior, flexibility and security of an application. Discussions are interactive and the learning is practical and hands-on.
Format of the Course
- Overview of CakePHP features and capabilities together with step-by-step development of a sample application.
Laravel PHP Framework
14 HoursThis instructor-led, live training in Sweden introduces the fundamentals of Laravel and walks participants through the creation of a Laravel-based web application.
Laravel Livewire
7 HoursThis instructor-led, live training in Sweden (online or onsite) is aimed at developers who wish to learn and use Livewire to build modern and dynamic application interfaces.
By the end of this training, participants will be able to:
- Build and test livewire components.
- Build applications using the Livewire library.
- Create dynamic components within PHP.
Laravel and Vue.js
14 HoursThis instructor-led, live training in Sweden (online or onsite) is aimed at web developers who wish to use Laravel and Vue JS for fullstack web development.
By the end of this training, participants will be able to:
- Develop web applications with Laravel and Vue JS.
- Integrate the Laravel backend API into Vue JS.
- Deploy a Laravel application.
Laravel: Middleware Development
14 HoursThis instructor-led, live training in (online or onsite) is aimed at web developers who wish to build middleware and web services in Laravel.
By the end of this training, participants will be able to:
- Use Laravel PHP Aritisan to generate code and components.
- Build RESTful APIs in Laravel that can browse, read, edit, add, and delete.
- Filter and sort results based on URL parameters using RESTful APIs.
Swoole for PHP Programmers
14 HoursThis instructor-led, live training (online or onsite) is aimed at PHP programmers wishing to write asynchronous web services using the PHP language (in a fashion similar to Node.js).
By the end of this training, participants will be able to:
- Install and configure Swoole
- Understand the concepts behind event-driven, asynchronous, non-blocking I/O networking models.
- Create and deploy asynchronous services written in PHP
- Speed up existing Laravel or Lumen applications with Laravel-Swool.
Format of the Course
- Interactive lecture and discussion
- Lots of exercises and practice
- Hands-on implementation in a live-lab environment
Course Customization Options
- To request a customized training for this course, please contact us to arrange.
- To learn more about Swool, please visit: https://www.swoole.co.uk/
Develop Web Applications with PHP and Yii 2
14 HoursYii is a high-performance PHP framework best for developing Web 2.0 applications.
Symfony2 - enterprise web framework
21 HoursSymfony is a set of PHP Components, a Web Application framework, a Philosophy and a Community.
Web Development with Symfony3
28 HoursSymfony is a set of PHP Components, a Web Application framework, a Philosophy and a Community.
Symfony 4 for Web Application Development
28 HoursSymfony 4 is a software development framework for PHP. It contains reusable PHP libraries to facilitate the development and testing of new applications written in PHP (Web apps or APIs). Symfony 4 is a command-line software framework with the built-in commands that makes PHP code development more efficient.
In this instructor-led, live training, participants will learn to use the Symfony framework and the PHP language as they step through the creation of a PHP application.
By the end of this training, participants will be able to:
- Use Symfony 4 to create and test code written in PHP
- Create simple code for PHP that reads and writes to a database
Audience
- Programmers and web developers with working knowledge of PHP and HTML
- Advanced developers who seek more efficient development tools for faster closures
- Software designers who need to update their understanding of current development tools that match user needs
Format of the course
- Part lecture, part discussion, exercises and heavy hands-on practice
NetBeans
14 HoursThis instructor-led, live training in Sweden (online or onsite) is aimed at developers who wish to use NetBeans to develop applications with Java and other programming languages.
By the end of this training, participants will be able to:
- Learn about NetBeans and how it works.
- Learn how to use NetBeans in Java programming.
- Use NetBeans to create templates and projects.