PHP: Creating Secure Websites
1h 23mAdvanced2021-03-23
Authors
Kevin Skoglund
Founder of NovaFabrica
Course details
Hackers target PHP web applications more often than other sites because most PHP code is written by developers with little security experience. Protecting web applications from these attacks has become an essential skill for all PHP developers. PHP: Creating Secure Websites shows you how to meet the most important security challenges when developing websites with PHP. Instructor Kevin Skoglund covers the techniques and PHP code needed to develop sites that are more secure, and to avoid common mistakes. Learn how to configure PHP properly and filter input and escape output. Then check out step-by-step defenses against the most common forms of attack, including cross-site scripting and SQL injection.
Learning objectives
Cross-site scripting (XSS)
Cross-site request forgery (CSRF)
SQL injection
Session hijacking and fixation
Learning objectives
Cross-site scripting (XSS)
Cross-site request forgery (CSRF)
SQL injection
Session hijacking and fixation
Skills covered
PHPProgramming LanguagesOpen SourceSoftware DevelopmentOne-Off
Concepts
Introduction
- The need for security with PHP
Security Overview
- What is security
- Security and PHP
- General security principles
Securing Your PHP Installation
- Keeping versions up to date
- phpinfo and phpMyAdmin
- Configure error reporting and logging
- Other configuration options
- PHP on a shared host
Filtering Input and Controlling Output
- Validating input
- Sanitizing data
- Keeping code private
- Smart logging
- Cookie configuration
Defending the Most Common Attacks
- Cross-site scripting XSS
- Cross-site request forgery CSRF
- SQL injection
- Session hijacking and fixation
- Remote system execution
- PHP code injection
Conclusion
- Next steps